Merge pull request #319 from Qwaz/rulinalg-201

Security advisory for AtheMathmo/rulinalg#201

crates/rulinalg/RUSTSEC-0000-0000.toml

@@ -0,0 +1,23 @@
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "rulinalg"
+date = "2020-02-11"
+title = "Lifetime boundary for `raw_slice` and `raw_slice_mut` are incorrect"
+url = "https://github.com/AtheMathmo/rulinalg/issues/201"
+description = """
+The affected version of `rulinalg` has incorrect lifetime boundary definitions
+for `RowMut::raw_slice` and `RowMut::raw_slice_mut`. They do not conform with
+Rust's borrowing rule and allows the user to create multiple mutable references
+to the same location. This may result in unexpected calculation result and data
+race if both references are used at the same time.
+"""
+
+[affected]
+
+    [affected.functions]
+    "rulinalg::matrix::RowMut::raw_slice" = [">= 0.4.0"]
+    "rulinalg::matrix::RowMut::raw_slice_mut" = [">= 0.4.0"]
+
+[versions]
+patched = []
+unaffected = ["< 0.4.0"]