Skip to content

Publish mathcat_c 0.7.7 to crates.io with the no-unsafe navigation fix and patched ZIP dependencies #9

Open

Description

@venkatesh6114

Request

Please publish MathCATForC as mathcat_c 0.7.7 on crates.io, using the published mathcat 0.7.7 dependency, so downstream consumers can obtain the release through Cargo rather than depending on a Git checkout or the movable latest tag.

Why this is needed

Braille-navigation crash with no-unsafe

We need a crates.io-consumable C-wrapper release containing Neil's fix for the reported crash during braille navigation when the no-unsafe feature is enabled. Please confirm the chosen release commit and MathCAT dependency include that fix.

ZIP dependency security advisory

The zip crate is affected by CVE-2026-115905 / GHSA-m665-v7pm-7grj:

The advisory concerns inconsistent interpretation of ZIP local-file and central-directory headers across archive readers. Please ensure the published wrapper's dependency requirements and release dependency resolution use patched ZIP versions, including any transitive copies.

The existing zip = "9.0" requirement permits patched 9.0.x releases, but also permits affected versions; changing the MathCAT dependency source alone does not guarantee remediation. This issue is requesting dependency remediation and release availability, not asserting a confirmed exploitable path in MathCATForC.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions