Migrate all advisories to V2 format (closes #228)

As announced in #228, this commit migrates all advisories to the new V2
format, which splits version information into a separate section, and
now has a structure which corresponds to the internal code structure of
the `rustsec` crate.

This is a breaking change for users of `cargo-audit` < 0.9, and anyone
who has written a 3rd party advisory format parser.
This commit is contained in:
Tony Arcieri
2020-03-01 10:42:21 -08:00
parent c54e93a581
commit 64c17acfe3
67 changed files with 325 additions and 223 deletions

View File

@@ -3,6 +3,8 @@ id = "RUSTSEC-2018-0009"
package = "crossbeam"
date = "2018-12-09"
title = "MsQueue and SegQueue suffer from double-free"
url = "https://github.com/crossbeam-rs/crossbeam-epoch/issues/82"
keywords = ["concurrency", "memory-management", "memory-corruption"]
description = """
Even if an element is popped from a queue, crossbeam would run its
destructor inside the epoch-based garbage collector. This is a source
@@ -13,7 +15,7 @@ The flaw was corrected by wrapping elements inside queues in a
Thanks to @c0gent for reporting the issue.
"""
patched_versions = [">= 0.4.1"]
unaffected_versions = ["< 0.4.0"]
url = "https://github.com/crossbeam-rs/crossbeam-epoch/issues/82"
keywords = ["concurrency", "memory-management", "memory-corruption"]
[versions]
patched = [">= 0.4.1"]
unaffected = ["< 0.4.0"]