From fdbe5b4fa1de5036a45de474f60d417d1f5e4a05 Mon Sep 17 00:00:00 2001 From: Mark Rousskov Date: Tue, 3 Jul 2018 15:05:35 -0600 Subject: [PATCH] Release notes 1.27.1 --- RELEASES.md | 23 +++++++++++++++++++++++ src/bootstrap/channel.rs | 2 +- 2 files changed, 24 insertions(+), 1 deletion(-) diff --git a/RELEASES.md b/RELEASES.md index 64b7cd3e2c4b..c2e93a72df02 100644 --- a/RELEASES.md +++ b/RELEASES.md @@ -1,3 +1,26 @@ +Version 1.27.1 (2018-07-10) +=========================== + +Security Notes +-------------- + +- rustdoc would execute plugins in the /tmp/rustdoc/plugins directory + when running, which enabled executing code as some other user on a + given machine. This release fixes that vulnerability; you can read + more about this on the [blog][rustdoc-sec]. + + Thank you to Red Hat for responsibily disclosing this vulnerability to us. + +Compatibility Notes +------------------- + +- The borrow checker was fixed to avoid an additional potential unsoundness when using + match ergonomics: [#51415][51415], [#49534][49534]. + +[51415]: https://github.com/rust-lang/rust/issues/51415 +[49534]: https://github.com/rust-lang/rust/issues/49534 +[rustdoc-sec]: https://blog.rust-lang.org/2018/07/06/security-advisory-for-rustdoc.html + Version 1.27.0 (2018-06-21) ========================== diff --git a/src/bootstrap/channel.rs b/src/bootstrap/channel.rs index 3453933a9652..25a709ccbb09 100644 --- a/src/bootstrap/channel.rs +++ b/src/bootstrap/channel.rs @@ -24,7 +24,7 @@ use Build; use config::Config; // The version number -pub const CFG_RELEASE_NUM: &str = "1.27.0"; +pub const CFG_RELEASE_NUM: &str = "1.27.1"; pub struct GitInfo { inner: Option,