From 67ed91a5b63be690e6631d286e359ba8bd5359e2 Mon Sep 17 00:00:00 2001 From: github-actions Date: Fri, 3 Jul 2026 13:44:53 +0000 Subject: [PATCH] Update gh-pages --- advisories/RUSTSEC-2026-0196.html | 173 ++++++++++++++++++ advisories/RUSTSEC-2026-0197.html | 233 +++++++++++++++++++++++ advisories/index.html | 42 +++++ categories/memory-corruption.html | 21 +++ feed.xml | 294 +++++++++++++++++++++++++++++- js/index.js | 4 +- keywords/aliasing.html | 21 +++ keywords/soundness.html | 21 +++ keywords/stacked-borrows.html | 21 +++ keywords/undefined-behavior.html | 21 +++ packages/cgmath.html | 113 ++++++++++++ packages/cgmath.json | 132 ++++++++++++++ packages/index.html | 6 + 13 files changed, 1099 insertions(+), 3 deletions(-) create mode 100644 advisories/RUSTSEC-2026-0196.html create mode 100644 advisories/RUSTSEC-2026-0197.html create mode 100644 packages/cgmath.html create mode 100644 packages/cgmath.json diff --git a/advisories/RUSTSEC-2026-0196.html b/advisories/RUSTSEC-2026-0196.html new file mode 100644 index 000000000..b3b87ddaf --- /dev/null +++ b/advisories/RUSTSEC-2026-0196.html @@ -0,0 +1,173 @@ + + + + + + + +RUSTSEC-2026-0196: cgmath: `cgmath` is unmaintained › RustSec Advisory Database + + + + + + + + + +
+
+

+ + + RustSec logo + +

+ +
+
+ +
+
+ +
+ +
+ +
+
+ + + History ⋅ + Edit ⋅ + JSON (OSV) + + + +
+

+ + RUSTSEC-2026-0196 + +

+

cgmath is unmaintained

+ +
+ + + +
+
Reported
+
+ +
+ +
Issued
+
+ + +
+ +
Package
+
+ + + cgmath + + (crates.io) + + + +
+ +
Type
+
+ + INFO + Unmaintained + +
+ + + + + + + + +
References
+
+ +
+ + + + + + + +
Patched
+
+ + no patched versions + +
+ + + + + +
+ + + + +

Description

+

The cgmath crate is no longer maintained.

+

Users should consider switching to a maintained alternative.

+ + +

Advisory available under CC0-1.0 + license. + + +

+
+
diff --git a/advisories/RUSTSEC-2026-0197.html b/advisories/RUSTSEC-2026-0197.html new file mode 100644 index 000000000..64cf84a3f --- /dev/null +++ b/advisories/RUSTSEC-2026-0197.html @@ -0,0 +1,233 @@ + + + + + + + +RUSTSEC-2026-0197: cgmath: `Matrix{2,3,4}::swap_columns` can trigger undefined behavior for identical indices › RustSec Advisory Database + + + + + + + + + +
+
+

+ + + RustSec logo + +

+ +
+
+ +
+
+ +
+ +
+ +
+
+ + + History ⋅ + Edit ⋅ + JSON (OSV) + + + +
+

+ + RUSTSEC-2026-0197 + +

+

Matrix{2,3,4}::swap_columns can trigger undefined behavior for identical indices

+ +
+ + + +
+
Reported
+
+ +
+ +
Issued
+
+ + +
+ +
Package
+
+ + + cgmath + + (crates.io) + + + +
+ +
Type
+
+ + INFO + Unsound + +
+ + +
Categories
+
+ +
+ + + +
Keywords
+
+ + #soundness + + #undefined-behavior + + #aliasing + + #stacked-borrows + +
+ + + + + +
References
+
+ +
+ + + + + + + +
Patched
+
+ + no patched versions + +
+ + + + + + + + +
+ + + +
+
Affected Functions
+
Version
+ +
cgmath::Matrix2::swap_columns
+
+
    + +
  • =0.18.0
    • + +
+
+ +
cgmath::Matrix3::swap_columns
+
+
    + +
  • =0.18.0
    • + +
+
+ +
cgmath::Matrix4::swap_columns
+
+
    + +
  • =0.18.0
    • + +
+
+ +
+ + + + +

Description

+

The Matrix2::swap_columns, Matrix3::swap_columns, and Matrix4::swap_columns +implementations call ptr::swap(&mut self[a], &mut self[b]).

+

When a == b, these safe APIs create two mutable references to the same matrix +column and pass them to ptr::swap. This violates Rust's aliasing rules and can +trigger undefined behavior. The issue can be reproduced from safe Rust by calling +swap_columns with identical column indices, for example m.swap_columns(0, 0).

+

A minimal fix is to return early when the two column indices are equal before +calling ptr::swap.

+ + +

Advisory available under CC0-1.0 + license. + + +

+
+
diff --git a/advisories/index.html b/advisories/index.html index 735c63c43..f68adafcc 100644 --- a/advisories/index.html +++ b/advisories/index.html @@ -64,6 +64,48 @@