Commit Graph

621 Commits

Author SHA1 Message Date
github-actions[bot]
2106e39f41 Assigned RUSTSEC-2020-0032 to alpm-rs (#361)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-08-25 16:32:10 -04:00
Sergey "Shnatsel" Davidoff
95382bacba Merge pull request #360 from Qwaz/0006-alpm-rs
StrcCtx deallocates a memory region that it doesn't own
2020-08-25 22:30:22 +02:00
Yechan Bae
0c82150105 Update 0006-alpm-rs 2020-08-25 15:50:00 -04:00
Yechan Bae
07f707755a Initial report for 0006-alpm-rs 2020-08-25 15:48:36 -04:00
github-actions[bot]
c12999b9c8 Assigned RUSTSEC-2020-0031 to tiny_http (#358)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-08-21 17:59:34 -04:00
Alex Gaynor
52f305fb45 renumber this as 0 so the assign ID script handles it (#357) 2020-08-21 17:58:10 -04:00
Sergey "Shnatsel" Davidoff
50e585fa5e Merge pull request #355 from snoopysecurity/add-tiny-http-request-smuggling
Add tiny-http Request Smuggling
2020-08-21 19:10:18 +02:00
Sergey "Shnatsel" Davidoff
1400f85920 drop categories 2020-08-21 19:09:16 +02:00
snoopysecurity
d7233ee826 Add tiny-http Request Smuggling 2020-08-21 10:56:33 +01:00
Sergey "Shnatsel" Davidoff
4b1e065e0c Merge pull request #354 from RustSec/assign-ids
Assigned RUSTSEC-2020-0030 to mozwire
2020-08-21 02:57:45 +02:00
github-actions[bot]
9587a27510 Assigned RUSTSEC-2020-0030 to mozwire 2020-08-21 00:57:05 +00:00
Sergey "Shnatsel" Davidoff
9eb3f9df91 Merge pull request #353 from alexanderkjall/master
Missing sanitazion in mozwire allows local file overwrite of files ending in .conf
2020-08-21 02:56:24 +02:00
Alexander Kjäll
ba84c3b5f6 Missing sanitazion in mozwire allows local file overwrite of files ending in .conf 2020-08-19 13:19:03 +02:00
Sergey "Shnatsel" Davidoff
8fba4e52f3 fix disclosure date 2020-08-15 03:34:56 +02:00
Sergey "Shnatsel" Davidoff
dcbd9baf6e Merge pull request #351 from RustSec/assign-ids
Assigned RUSTSEC-2019-0036 to failure
2020-08-15 02:02:28 +02:00
github-actions[bot]
8cfebb1f2b Assigned RUSTSEC-2019-0036 to failure 2020-08-14 23:04:44 +00:00
Sergey "Shnatsel" Davidoff
1837ccc396 Merge pull request #318 from Qwaz/failure-336
Informational advisory for rust-lang-nursery/failure#336
2020-08-15 01:03:56 +02:00
Yechan Bae
7ba77515fa Apply PR feedback 2020-08-14 18:15:56 -04:00
github-actions[bot]
90624f4e01 Assigned RUSTSEC-2020-0029 to rgb (#350)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-08-14 16:21:16 -04:00
Sergey "Shnatsel" Davidoff
361f5483eb Merge pull request #349 from RustSec/rgb
Add advisory for rgb
2020-08-14 22:18:48 +02:00
Sergey "Shnatsel" Davidoff
9611ff4c0e Added note about invariants, specified resolution 2020-08-14 21:24:17 +02:00
Sergey "Shnatsel" Davidoff
a61e5b2ca6 Fix spelling
Co-authored-by: HeroicKatora <HeroicKatora@users.noreply.github.com>
2020-08-14 21:19:39 +02:00
Sergey "Shnatsel" Davidoff
5cc0589551 Add advisory for rgb 2020-08-14 18:22:30 +02:00
github-actions[bot]
fdc3c78d2c Assigned RUSTSEC-2020-0028 to rocket (#348)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-08-14 11:51:50 -04:00
Sergey "Shnatsel" Davidoff
1b673b14ea Merge pull request #320 from Qwaz/rocket-1312
Informational advisory for SergioBenitez/Rocket#1312
2020-08-14 17:40:21 +02:00
Vinzent Steinberg
ee840d4a4d Add some minimal guideline about GHSA (#347)
Fixes #345.
2020-08-01 11:43:50 -07:00
Vinzent Steinberg
a7b90acdc2 Add alias for GHSA (#346)
Co-authored-by: Tony Arcieri <bascule@gmail.com>
2020-08-01 09:40:07 -07:00
Alex Gaynor
ca4219e11d Fixes #334 -- give the assignment PRs a useful commit message (#344)
* Fixes #334 -- give the assignment PRs a useful commit message

* Update assign-ids.yml
2020-07-24 14:14:12 -04:00
github-actions[bot]
20dbede595 Assign RUSTSEC IDs (#343)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-24 10:16:21 -07:00
Eduardo Sánchez Muñoz
36fb0b786c Add advisory for traitobject (#308)
Co-authored-by: Tony Arcieri <bascule@gmail.com>
2020-07-24 10:10:30 -07:00
github-actions[bot]
fa0771ddb7 Assign RUSTSEC IDs (#342)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-24 10:03:49 -07:00
Vinzent Steinberg
6d238619b6 Undefined behavior in Rand (#149)
Co-authored-by: Ralf Jung <post@ralfj.de>
Co-authored-by: Tony Arcieri <bascule@gmail.com>
2020-07-24 10:00:19 -07:00
github-actions[bot]
ce0b60265d Assign RUSTSEC-2018-0018 to smallvec (#341)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-24 11:48:53 -04:00
Ralf Jung
fca3269356 add smallvec unsoundness (#337) 2020-07-24 11:47:39 -04:00
github-actions[bot]
9ad6be8534 Assign RUSTSEC IDs (#340)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-24 11:47:27 -04:00
Ralf Jung
ace2be3fca add linked-hash-map unsoundness (#316) 2020-07-24 11:46:00 -04:00
github-actions[bot]
c34d120b4f Assign RUSTSEC IDs (#339)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-24 11:45:38 -04:00
Ralf Jung
5b2859bf58 bigint is unmaintained (#338) 2020-07-24 08:34:48 -07:00
Tony Arcieri
33aaadd1fd RUSTSEC-2019-0031: add link to spinning-rs in description (#336) 2020-07-13 09:00:20 -07:00
Sergey "Shnatsel" Davidoff
b952f8c409 Merge pull request #333 from RustSec/assign-ids
Assign RUSTSEC IDs
2020-07-09 22:18:50 +02:00
github-actions[bot]
a5c4d5fc0e Assign RUSTSEC IDs 2020-07-09 20:02:07 +00:00
Sergey "Shnatsel" Davidoff
83f70aefc0 Merge pull request #332 from iliana/CVE-2020-15093
tough: CVE-2020-15093 / GHSA-5q2r-92f9-4m49
2020-07-09 22:01:12 +02:00
iliana etaoin
f17173c999 tough: CVE-2020-15093 2020-07-09 12:49:48 -07:00
CreepySkeleton
6b10ce0976 Update yaml-rust advirsory to indicate clap as non-vulnerable (#331) 2020-07-06 08:59:19 -07:00
Sergey "Shnatsel" Davidoff
ecf0648202 Merge pull request #330 from RustSec/assign-ids
Assign RUSTSEC IDs
2020-07-05 13:49:26 +02:00
github-actions[bot]
6b56bccc8c Assign RUSTSEC IDs 2020-07-05 11:48:09 +00:00
Sergey "Shnatsel" Davidoff
fb8d644b16 Merge pull request #319 from Qwaz/rulinalg-201
Security advisory for AtheMathmo/rulinalg#201
2020-07-05 13:47:30 +02:00
github-actions[bot]
c649f53838 Assign RUSTSEC-2020-0022 to ozone (#329)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-04 16:25:40 -04:00
Sergey "Shnatsel" Davidoff
aead4efb76 Merge pull request #328 from Qwaz/ozone
Security advisory for bqv/ozone
2020-07-04 22:22:31 +02:00
Yechan Bae
f17f55472c Fix the function path and make the advisory informational 2020-07-04 01:53:33 -04:00