mirror of
https://github.com/OMGeeky/advisory-db.git
synced 2026-02-23 15:38:27 +01:00
Migrate all advisories to V2 format (closes #228)
As announced in #228, this commit migrates all advisories to the new V2 format, which splits version information into a separate section, and now has a structure which corresponds to the internal code structure of the `rustsec` crate. This is a breaking change for users of `cargo-audit` < 0.9, and anyone who has written a 3rd party advisory format parser.
This commit is contained in:
@@ -3,6 +3,8 @@ id = "RUSTSEC-2018-0009"
|
||||
package = "crossbeam"
|
||||
date = "2018-12-09"
|
||||
title = "MsQueue and SegQueue suffer from double-free"
|
||||
url = "https://github.com/crossbeam-rs/crossbeam-epoch/issues/82"
|
||||
keywords = ["concurrency", "memory-management", "memory-corruption"]
|
||||
description = """
|
||||
Even if an element is popped from a queue, crossbeam would run its
|
||||
destructor inside the epoch-based garbage collector. This is a source
|
||||
@@ -13,7 +15,7 @@ The flaw was corrected by wrapping elements inside queues in a
|
||||
|
||||
Thanks to @c0gent for reporting the issue.
|
||||
"""
|
||||
patched_versions = [">= 0.4.1"]
|
||||
unaffected_versions = ["< 0.4.0"]
|
||||
url = "https://github.com/crossbeam-rs/crossbeam-epoch/issues/82"
|
||||
keywords = ["concurrency", "memory-management", "memory-corruption"]
|
||||
|
||||
[versions]
|
||||
patched = [">= 0.4.1"]
|
||||
unaffected = ["< 0.4.0"]
|
||||
|
||||
Reference in New Issue
Block a user