OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-10 13:41:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
786 Commits 1 Branch 0 Tags
00a4c19a4608a5010260bf3bf8e7b1e53e008bf2
Commit Graph

430 Commits

Author SHA1 Message Date
Jake McGinty
56350b2803 [portaudio] add build script RCE 2019-06-06 16:56:12 +09:00
Andronik Ordian
49bae94718 [protobuf] fix patched versions 2019-05-20 15:45:47 +02:00
Andronik Ordian
4b36267927 [libp2p-core] fix patched versions 2019-05-20 11:38:22 +02:00
Tony Arcieri
c300327fd6 RUSTSEC-2019-0003: Fix date 
Mistakenly logged as 2018
 2019-05-19 16:51:18 -07:00
Ossi Herrala
bfc6f36d20 protobuf 2.6.0 and 1.7.5 released with fix to this issue 2019-05-20 01:29:27 +03:00
Tony Arcieri
58a4d5b2a2 Assign RUSTSEC-2019-0004 to libp2p-core 2019-05-15 13:41:19 -07:00
Tony Arcieri
ec1cf8ffb1 Assign RUSTSEC-2019-0003 to protobuf 2019-05-15 13:40:57 -07:00
Pierre Krieger
924dd24c23 Add libp2p ed25519 signature verification failure 2019-05-15 21:31:10 +02:00
Gerardo Di Giacomo
1a8bf5bc41 fixed key name 2019-05-15 09:30:53 -07:00
Gerardo Di Giacomo
f97b9a0ad3 Update RUSTSEC-0000-0000.toml 2019-05-14 19:44:00 -07:00
Gerardo Di Giacomo
2885752bf5 Add protobuf out-of-memory vulnerability 2019-05-14 19:35:30 -07:00
Tony Arcieri
f14a0d9738 Assign RUSTSEC-2019-0002 to slice-deque 2019-05-07 12:13:52 -07:00
gnzlbg
7412cdbd7f Fix file name 2019-05-07 19:39:14 +02:00
gnzlbg
7de8dba6b5 Add advisory for slice-deque 2019-05-07 19:30:37 +02:00
Tony Arcieri
75a40b530a Assign RUSTSEC-2019-0001 to ammonia 
Original PR: https://github.com/RustSec/advisory-db/pull/93
 2019-05-04 16:39:43 -07:00
Konrad Borowski
aaf99ec45d Add advisory for ammonia 2019-04-28 15:06:27 +02:00
Tony Arcieri
bf5fbb02da Assign RUSTSEC-2018-0013 to safe-transmute 
Original PR: https://github.com/RustSec/advisory-db/pull/89
 2019-03-03 08:15:26 -08:00
nabijaczleweli
b34dcfbeaf Optimisation in the wake of lack of docuemntation 2019-03-02 21:08:30 +01:00
nabijaczleweli
0eb9b4e364 Split affected_paths 2019-03-02 20:39:10 +01:00
nabijaczleweli
103630159d Replace affected_functions with affected_paths 2019-03-02 18:49:14 +01:00
nabijaczleweli
3a073396ba Add safe_transmute vec2vec transmutation bug 
Ref: https://github.com/nabijaczleweli/safe-transmute-rs/pull/36
 2019-03-02 17:32:29 +01:00
Tony Arcieri
5ffa5a8861 Assign RUSTSEC-2018-0012 to orion 
Original PR: https://github.com/RustSec/advisory-db/pull/87
 2019-02-13 16:31:27 -08:00
brycx
0ce0b2bb0f Add orion advisory 2019-02-12 09:14:33 +01:00
Tony Arcieri
782efebde9 Revert "Add affected functions to legacy security warnings (#83)" 
This reverts commit 0a981e2b6f.

These now need to use the new `affected_paths` attribute, which has a
different (VersionReq-bucketed) format.
 2019-01-13 17:31:25 -08:00
Moritz Beller
0a981e2b6f Add affected functions to legacy security warnings (#83) 
Add affected functions to advisories

Add `affected_functions` to:

- RUSTSEC-2018-0003
- RUSTSEC-2017-0002
- RUSTSEC-2018-0002
- RUSTSEC-2018-0001
- RUSTSEC-2017-0004
 2018-12-21 06:11:32 -08:00
Tony Arcieri
ff0b4e0703 Assign RUSTSEC-2018-0011 to arrayfire 
Original PR: https://github.com/RustSec/advisory-db/pull/80
 2018-12-18 18:14:37 -08:00
pradeep
e010bc1307 Add memory-corruption keyword to arrayfire rustsec 2018-12-18 23:30:09 +05:30
pradeep
9dd2785e95 Enum repr memory corruption in arrayfire crate 2018-12-18 23:25:30 +05:30
Tony Arcieri
ac8b248cfd Assign RUSTSEC-2018-0010 to openssl 
Original PR: https://github.com/RustSec/advisory-db/pull/77
 2018-12-16 10:08:17 -08:00
Alex Gaynor
dc704601c0 Request RUSTSEC for resolved UAF in OpenSSL 2018-12-10 19:48:20 -05:00
Tony Arcieri
33da41e6aa Assign RUSTSEC-2018-0009 to crossbeam 
Original PR: https://github.com/RustSec/advisory-db/pull/75
 2018-12-09 09:42:17 -08:00
Stjepan Glavina
e769e16a6c Add memory-corruption 2018-12-09 16:57:04 +00:00
Stjepan Glavina
968e1279f6 Remove comments 2018-12-09 16:46:28 +00:00
Stjepan Glavina
e717bd76c2 Mark < 0.4.0 as unaffected 2018-12-09 14:24:34 +00:00
Stjepan Glavina
fd45ce4eb5 A bug in crossbeam v0.4.0 2018-12-09 14:07:06 +00:00
Tony Arcieri
875d4d5fdd Assign RUSTSEC-2018-0008 to slice-deque 
Original PR: https://github.com/RustSec/advisory-db/pull/70
 2018-12-06 09:18:37 -08:00
gnzlbg
4effd1975e Add keywords 2018-12-06 17:58:48 +01:00
gnzlbg
895fe023df Add advisory for slice-deque 2018-12-06 17:53:12 +01:00
Tony Arcieri
487ffe4728 Fix "date:" field on RUSTSEC-2018-0007 
It appears it was mistakenly filed as being in 2017
 2018-10-14 09:53:19 -07:00
Tony Arcieri
aa901622d6 Assign RUSTSEC-2018-0007 to trust-dns-proto 
Original PR: https://github.com/RustSec/advisory-db/pull/62
 2018-10-13 18:31:34 -07:00
Tony Arcieri
b825af523e Merge branch 'master' into trust-dns-proto-0-4-3 2018-10-13 18:14:24 -07:00
Tony Arcieri
89aab75c1b Assign RUSTSEC-2018-0006 to yaml-rust 
Original PR: https://github.com/RustSec/advisory-db/pull/60
 2018-10-13 18:09:39 -07:00
Tony Arcieri
2c3880df0d Merge branch 'master' into yaml-rust-advisory 2018-10-13 17:32:09 -07:00
Tony Arcieri
ee579432c6 Assign RUSTSEC-2018-0005 to serde_yaml 
Original PR: https://github.com/RustSec/advisory-db/pull/61
 2018-10-13 16:24:33 -07:00
Ossi Herrala
d6b9d03e45 Stack overflow in Trust-DNS when parsing DNS packet 2018-10-11 15:55:18 +03:00
Konrad Borowski
f22c3798f6 Add advisory for serde_yaml 2018-09-17 08:59:36 +02:00
Konrad Borowski
dce22c22b2 Add advisory for yaml-rust 2018-09-17 08:48:40 +02:00
Tony Arcieri
575dc9a705 Assign RUSTSEC-2018-0004 to claxon 
Original PR:

https://github.com/RustSec/advisory-db/pull/54
 2018-08-25 07:11:55 -07:00
Ruud van Asseldonk
a79e12f482 Add advisory for Claxon 0.3.2 and 0.4.1 2018-08-25 12:36:22 +02:00
Tony Arcieri
1296249cfb RUSTSEC-2016-0002.toml: use 'affected_os' attribute 
Replaces the 'affected_platforms' attribute in rustsec v0.9.
 2018-07-26 21:02:15 -07:00