Commit Graph

786 Commits

Author SHA1 Message Date
github-actions[bot]
00a4c19a46 Assigned RUSTSEC-2020-0065 to fake_clock (#471)
Co-authored-by: tarcieri <tarcieri@users.noreply.github.com>
2020-11-02 06:46:33 -08:00
Stephen Coyle
a949bd4620 Add unmaintained crate advisory for fake_clock (#465)
It's been renamed to `sn_fake_clock`
2020-11-02 06:45:29 -08:00
github-actions[bot]
74c2e86f5d Assigned RUSTSEC-2020-0064 to ffi_utils (#470)
Co-authored-by: tarcieri <tarcieri@users.noreply.github.com>
2020-11-02 06:45:15 -08:00
Stephen Coyle
3adba0fcc4 Add unmaintained crate advisory for ffi_utils (#464)
It's been renamed to `sn_ffi_utils`
2020-11-02 06:43:54 -08:00
github-actions[bot]
51fd5e3c97 Assigned RUSTSEC-2020-0063 to safe-nd (#469)
Co-authored-by: tarcieri <tarcieri@users.noreply.github.com>
2020-11-02 06:43:36 -08:00
Stephen Coyle
0da539a26e Add unmaintained crate advisory for safe-nd (#467)
It's been renamed to `sn_data_types`
2020-11-02 06:42:05 -08:00
Sergey "Shnatsel" Davidoff
a0e59ff2f8 Merge pull request #463 from RustSec/assign-ids
Assigned RUSTSEC-2020-0062 to futures-util
2020-10-31 14:17:37 +01:00
Shnatsel
52cd103576 Assigned RUSTSEC-2020-0062 to futures-util 2020-10-31 13:16:56 +00:00
Sergey "Shnatsel" Davidoff
529c111e43 Merge pull request #460 from BlackHoleFox/futures-util-futuresunordered-badsync
Add advisory for unsound Sync impl on FuturesUnordered in futures-util
2020-10-31 14:16:33 +01:00
Sergey "Shnatsel" Davidoff
aed943c2d1 Merge pull request #462 from RustSec/assign-ids
Assigned RUSTSEC-2020-0061 to futures-task
2020-10-31 14:16:13 +01:00
Shnatsel
e4784fd312 Assigned RUSTSEC-2020-0061 to futures-task 2020-10-31 13:16:00 +00:00
Sergey "Shnatsel" Davidoff
3a89b52370 Merge pull request #459 from BlackHoleFox/futures-task-noop_waker_ref-null-deref
Add advisory for potential null pointer deref in futures-task
2020-10-31 14:15:36 +01:00
Sergey "Shnatsel" Davidoff
b3b6f8501a Merge pull request #461 from RustSec/assign-ids
Assigned RUSTSEC-2020-0060 to futures-task
2020-10-31 14:12:54 +01:00
Shnatsel
338f097760 Assigned RUSTSEC-2020-0060 to futures-task 2020-10-31 13:12:22 +00:00
Sergey "Shnatsel" Davidoff
ababdd40a6 Merge pull request #458 from BlackHoleFox/futures-util-waker-useafterfree
Add advisory for use-after-free in futures_task::waker
2020-10-31 14:11:56 +01:00
BlackHoleFox
47bfd9f2a4 Add advisory for unsound Sync implemention on FuturesUnordered in futures-util 2020-10-30 20:54:34 -05:00
BlackHoleFox
8c7efa1d5c Add advisory for potential null pointer deref in futures-task 2020-10-30 20:30:38 -05:00
BlackHoleFox
6a31581e98 Add advisory for use-after-free in futures-util task::waker 2020-10-30 19:44:41 -05:00
Alex Gaynor
b78fac19c0 Bumped create-pull-request github action to v3 (#457) 2020-10-30 17:12:18 -07:00
github-actions[bot]
9cd2504f39 Assigned RUSTSEC-2020-0059 to futures-util (#456)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-10-30 19:55:47 -04:00
BlackHoleFox
a36b1185ed Add advisory for data race fix in futures-util (#455) 2020-10-30 19:54:00 -04:00
Tony Arcieri
09a8d7b23a Bump rustsec-admin to v0.3.1 (#453) 2020-10-27 12:58:50 -07:00
Tony Arcieri
0ad26bc777 Bump rustsec-admin to v0.3.0 (#452) 2020-10-26 07:29:50 -07:00
Tony Arcieri
67a2144be6 RUSTSEC-2020-0015: remove wildcards (#451)
They're breaking the parser:

https://github.com/RustSec/rustsec-crate/pull/244/checks?check_run_id=1305962917
2020-10-25 14:39:06 -07:00
Tony Arcieri
1bf68e0dce RUSTSEC-2020-0015: use wildcards in version req (#450)
`semver` v0.11 is having trouble parsing these requirements.
2020-10-25 14:28:21 -07:00
Tony Arcieri
3796cc005e README.md: point chat badge to Zulip (#449) 2020-10-25 12:56:06 -07:00
Tony Arcieri
3b1f08f212 Unyank RUSTSEC-2020-0011 (#448)
This advisory is featured in the `plutonium` rustdoc:

https://docs.rs/plutonium/

It'd be a shame to have the link 404.
2020-10-25 12:51:46 -07:00
github-actions[bot]
146de2d8c7 Assigned RUSTSEC-2018-0021 to libpulse-binding (#447)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-10-25 12:21:56 -07:00
Lyndon Brown
59bee556dd Add advisory for use-after-frees fixed in libpulse-binding v1.2.1 (#433) 2020-10-25 12:19:41 -07:00
github-actions[bot]
1e48ac3958 Assigned RUSTSEC-2019-0038 to libpulse-binding (#446)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-10-25 12:19:23 -07:00
Lyndon Brown
681a20408c Add advisory for notable UB fix in libpulse-binding v2.6.0 (#435) 2020-10-25 12:17:51 -07:00
github-actions[bot]
218de91af9 Assigned RUSTSEC-2020-0058 to stream-cipher (#445)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-10-25 12:14:03 -07:00
Tony Arcieri
5c9ebbfa87 Add unmaintained crate advisory for stream-cipher (#444)
It's been renamed to `cipher`.
2020-10-25 12:09:41 -07:00
github-actions[bot]
fa616899f0 Assigned RUSTSEC-2020-0057 to block-cipher (#443)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-10-25 12:05:32 -07:00
Tony Arcieri
8505c9578f Add unmaintained crate advisory for block-cipher (#442)
It's been renamed to `cipher`.
2020-10-25 12:04:19 -07:00
github-actions[bot]
691a7504be Assigned RUSTSEC-2020-0056 to stdweb (#441)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-10-25 11:57:46 -07:00
Tony Arcieri
acc73d9598 CI: bump rustsec-admin to v0.3.0-pre3 (#440)
Trying to fix an `assign-id` bug
2020-10-25 11:49:14 -07:00
Tony Arcieri
6544190137 Add unmaintained crate advisory for stdweb (#439)
Closes #391
2020-10-25 11:08:58 -07:00
Tony Arcieri
5751a5f4cc CI: bump rustsec-admin to v0.3.0-pre2 (#438)
This version has the old TOML advisories fail lint, and also hopefully
fixes automatic ID assignment.
2020-10-25 10:58:49 -07:00
Tony Arcieri
6e48979dab Add EXAMPLE_ADVISORY.md (#436)
Adds an example advisory in the V3 format (#414) and updates the schema
information in README.md to reflect that.
2020-10-22 07:05:44 -07:00
Tony Arcieri
fb2a1a6c47 Rename RUSTSEC-2020-0055 to RUSTSEC-2018-0020 (#437)
It was accidentally filed under the wrong year.
2020-10-22 06:49:26 -07:00
Sergey "Shnatsel" Davidoff
7338ca9c70 Addign RUSTSEC-2020-0055 to libpulse-binding 2020-10-22 05:31:42 +02:00
Sergey "Shnatsel" Davidoff
2034787c1e Merge pull request #434 from jnqnfe/b
Add advisory for possible use-after-free fixed in libpulse-binding v2.5.0
2020-10-22 05:28:57 +02:00
Lyndon Brown
c128a6bdcd Add advisory for possible use-after-free fixed in libpulse-binding v2.5.0 2020-10-22 03:15:42 +01:00
Sergey "Shnatsel" Davidoff
7d14cb7de8 Merge pull request #428 from taiki-e/rustsec-2020-0052
Add CVE and GHSA to RUSTSEC-2020-0052
2020-10-17 01:12:16 +02:00
Tony Arcieri
68af791cc2 Assign RUSTSEC-2020-{0053,0054} to dirs/directories (#431)
Original PR: https://github.com/RustSec/advisory-db/pull/430/files
2020-10-16 13:55:50 -07:00
melocene
e36c10d843 dirs and directories crates are unmaintained (#430) 2020-10-16 13:50:54 -07:00
Taiki Endo
7358a10d0d Add CVE and GHSA to RUSTSEC-2020-0052 2020-10-15 04:06:29 +09:00
Egor Larionov
b6bcce2c6b Add patch version for the unsoundness issue in dync (#427) 2020-10-13 07:41:52 -04:00
Sergey "Shnatsel" Davidoff
4da6145a2a Merge pull request #426 from RustSec/RUSTSEC-2020-0052-assign
Assign RUSTSEC-2020-0052 to crossbeam-channel
2020-10-11 15:16:57 +02:00