diff --git a/CHANGELOG.md b/CHANGELOG.md index a2ea2cb..abe5b2f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -28,6 +28,20 @@ Released YYYY-MM-DD. -------------------------------------------------------------------------------- +## 3.11.1 + +Released 2022-10-18. + +### Security + +* Fixed a bug where when `std::vec::IntoIter` was ported to + `bumpalo::collections::vec::IntoIter`, it didn't get its underlying `Bump`'s + lifetime threaded through. This meant that `rustc` was not checking the + borrows for `bumpalo::collections::IntoIter` and this could result in + use-after-free bugs. + +-------------------------------------------------------------------------------- + ## 3.11.0 Released 2022-08-17. diff --git a/Cargo.toml b/Cargo.toml index 83b5a57..703a9a8 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -8,7 +8,7 @@ license = "MIT/Apache-2.0" name = "bumpalo" readme = "README.md" repository = "https://github.com/fitzgen/bumpalo" -version = "3.11.0" +version = "3.11.1" exclude = ["/.github/*", "/benches", "/tests", "valgrind.supp", "bumpalo.png"] [package.metadata.docs.rs]