Ouroboros is Unsound -- RUSTSEC-2023-0042

Question

Ouroboros is Unsound -- RUSTSEC-2023-0042

wookietreiber opened this issue a year ago · comments

♫ Christian Krause ♫ commented a year ago

Unfortunate news, but may be relevant before v3 release: https://rustsec.org/advisories/RUSTSEC-2023-0042

$ cargo audit
...
Crate:     ouroboros
Version:   0.15.6
Warning:   unsound
Title:     Ouroboros is Unsound
Date:      2023-06-11
ID:        RUSTSEC-2023-0042
URL:       https://rustsec.org/advisories/RUSTSEC-2023-0042
Dependency tree:
ouroboros 0.15.6
└── imap 3.0.0-alpha.10
...

♫ Christian Krause ♫ · Answer 1 · Sat Jun 17 2023 05:28:27 GMT+0800 (China Standard Time)

Might be fixed by #265.

Jon Gjengset · Answer 2 · Sun Aug 13 2023 17:29:23 GMT+0800 (China Standard Time)

#265 is now merged and according to the advisory, 0.16 does not have this issue any more, so I think we're good! I'll cut a new alpha soon-ish :) If I forget, please ping me!