[weihanglo]

Affected crate(s)

• libz-sys (39,525,844 recent downloads per crates.io)

Links to upstream issue(s) or PR(s)

• GHSA-8p3x-q3q3-q3v5
• fix(libz-sys): stop printing zlib cmd in build script rust-lang/libz-sys#280

Severity

LOW (we didn't even cut one for miri)

Checklist

• Advisory filename(s) starts with RUSTSEC-0000-0000 as the ID
• date field is set to the public disclosure date
  • though this kind of pattern has been disclosed already in the recent Miri blogpost
• Contains a concise and descriptive title after advisory metadata
• Asked maintainer(s) if publishing an advisory is appropriate
  • cc @Byron
  • also rust-lang security response WG asked me to do this :)

[Byron]

Thank you! No objections ✅.