Skip to content

Commit

Permalink
Assigned RUSTSEC-2024-0408 to pprof, RUSTSEC-2024-0409 to pyo3 (#2161)
Browse files Browse the repository at this point in the history
Co-authored-by: Shnatsel <[email protected]>
  • Loading branch information
github-actions[bot] and Shnatsel authored Dec 5, 2024
1 parent 124289b commit 4631071
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 4 deletions.
2 changes: 1 addition & 1 deletion .duplicate-id-guard
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
This file causes merge conflicts if two ID assignment jobs run concurrently.
This prevents duplicate ID assignment due to a race between those jobs.
52ce56af0e3587c35957a369b6ae681c5916562488150f9e1213a1532a7aa92d -
65247854262de86caa24f2a67678715d325d32f5a4198ff27d9082e4e1589829 -
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
id = "RUSTSEC-2024-0408"
package = "pprof"
date = "2024-12-04"
url = "https://github.com/tikv/pprof-rs/issues/232"
Expand Down
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
id = "RUSTSEC-2024-0409"
package = "pyo3"
date = "2024-12-04"
url = "https://github.com/PyO3/pyo3/issues/4757"
Expand All @@ -16,4 +16,4 @@ unaffected = ["< 0.23.0"]

In PyO3 0.23.0 the `PYO3_CONFIG_FILE` environment variable used to configure builds regressed such that changing the environment variable would no longer trigger PyO3 to reconfigure and recompile. In combination with workflows using tools such as `maturin` to build for multiple versions in a single build, this leads to Python wheels being compiled against the wrong Python API version.

All users who distribute artefacts for multiple Python versions are encouraged to update and rebuild with PyO3 0.23.3. Affected wheels produced from PyO3 0.23.0 through 0.23.2 are highly unstable and will crash the Python interpreter in unpredictable ways.
All users who distribute artefacts for multiple Python versions are encouraged to update and rebuild with PyO3 0.23.3. Affected wheels produced from PyO3 0.23.0 through 0.23.2 are highly unstable and will crash the Python interpreter in unpredictable ways.

0 comments on commit 4631071

Please sign in to comment.