diff --git a/crates/tempdir/RUSTSEC-2018-0017.md b/crates/tempdir/RUSTSEC-2018-0017.md index 473030e2ce..444d89458a 100644 --- a/crates/tempdir/RUSTSEC-2018-0017.md +++ b/crates/tempdir/RUSTSEC-2018-0017.md @@ -13,5 +13,4 @@ unaffected = [] # `tempdir` crate has been deprecated; use `tempfile` instead -The [`tempdir`](https://crates.io/crates/tempdir) crate has been deprecated -and the functionality is merged into [`tempfile`](https://crates.io/crates/tempfile). +The [`tempdir`](https://crates.io/crates/tempdir) crate has been deprecated. diff --git a/crates/tempfile/RUSTSEC-0000-0000.md b/crates/tempfile/RUSTSEC-0000-0000.md new file mode 100644 index 0000000000..b41cc9dfb9 --- /dev/null +++ b/crates/tempfile/RUSTSEC-0000-0000.md @@ -0,0 +1,17 @@ +```toml +[advisory] +id = "RUSTSEC-0000-0000" +package = "tempfile" +date = "2022-05-01" +url = "https://github.com/Stebalien/tempfile/issues/178" +references = ["https://github.com/Stebalien/tempfile/pull/141", "https://github.com/Stebalien/tempfile/pull/162", "https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File"] +keywords = ["tempfile"] +[versions] +patched = [] +``` + +# tempfile uses predictable RNG + +tempfile makes security guarantees that are not met by using predictable random number generator. + +The vectors may or may not vary by the platform and the use of the library. \ No newline at end of file diff --git a/crates/temporary/RUSTSEC-2018-0022.md b/crates/temporary/RUSTSEC-2018-0022.md index 8745fa65b3..4f5dc4a4f6 100644 --- a/crates/temporary/RUSTSEC-2018-0022.md +++ b/crates/temporary/RUSTSEC-2018-0022.md @@ -28,5 +28,3 @@ fn random_seed(_: &Path, _: &str) -> [u64; 2] { This has been resolved in the 0.6.4 release. The crate is not intended to be used outside of a testing environment. - -For a general purpose crate to create temporary directories, [`tempfile`](https://crates.io/crates/tempfile) is an alternative for this crate.