diff --git a/README.md b/README.md index 118be59..d9084c1 100644 --- a/README.md +++ b/README.md @@ -60,30 +60,36 @@ This allows an attacker to Y. The flaw was corrected by Z. """ -# URL to a long-form description of this issue, e.g. a GitHub issue/PR, -# a change log entry, or a blogpost announcing the release (optional) -url = "https://github.com/mystuff/mycrate/issues/123" - -# Keywords which describe this vulnerability, similar to Cargo keywords -keywords = ["ssl", "mitm"] - # Versions which include fixes for this vulnerability (mandatory) patched_versions = [">= 1.2.0"] # Versions which were never vulnerable (optional) -unaffected_versions = ["< 1.1.0"] +#unaffected_versions = ["< 1.1.0"] -# Platforms this vulnerability specifically affects (optional) -# See: https://docs.rs/rustsec/latest/rustsec/advisory/struct.PlatformReq.html -#affected_platforms = ["*windows*"] +# URL to a long-form description of this issue, e.g. a GitHub issue/PR, +# a change log entry, or a blogpost announcing the release (optional) +url = "https://github.com/mystuff/mycrate/issues/123" + +# Keywords which describe this vulnerability, similar to Cargo (optional) +keywords = ["ssl", "mitm"] # Vulnerability aliases, e.g. CVE IDs (optional but recommended) # Request a CVE for your RustSec vulns: https://iwantacve.org/ -aliases = ["CVE-2018-XXXX"] +#aliases = ["CVE-2018-XXXX"] # References to related vulnerabilities (optional) # e.g. CVE for a C library wrapped by a -sys crate) -references = ["CVE-2018-YYYY", "CVE-2018-ZZZZ"] +#references = ["CVE-2018-YYYY", "CVE-2018-ZZZZ"] + +# CPU architectures impacted by this vulnerability (optional) +# For a list of CPU architecture strings, see the "platforms" crate: +# +#affected_arch = ["x86", "x86_64"] + +# Operating systems impacted by this vulnerability (optional) +# For a list of OS strings, see the "platforms" crate: +# +#affected_os = ["windows"] ``` ## License diff --git a/crates/hyper/RUSTSEC-2016-0002.toml b/crates/hyper/RUSTSEC-2016-0002.toml index c03c4a7..5e54700 100644 --- a/crates/hyper/RUSTSEC-2016-0002.toml +++ b/crates/hyper/RUSTSEC-2016-0002.toml @@ -5,7 +5,7 @@ date = "2016-05-09" url = "https://github.com/hyperium/hyper/blob/master/CHANGELOG.md#v094-2016-05-09" title = "HTTPS MitM vulnerability due to lack of hostname verification" keywords = ["ssl", "mitm"] -affected_platforms = ["*windows*"] +affected_os = ["windows"] patched_versions = [">= 0.9.4"] references = ["RUSTSEC-2016-0001"] description = """