github-actions[bot]
|
2106e39f41
|
Assigned RUSTSEC-2020-0032 to alpm-rs (#361)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-08-25 16:32:10 -04:00 |
|
Sergey "Shnatsel" Davidoff
|
95382bacba
|
Merge pull request #360 from Qwaz/0006-alpm-rs
StrcCtx deallocates a memory region that it doesn't own
|
2020-08-25 22:30:22 +02:00 |
|
Yechan Bae
|
0c82150105
|
Update 0006-alpm-rs
|
2020-08-25 15:50:00 -04:00 |
|
Yechan Bae
|
07f707755a
|
Initial report for 0006-alpm-rs
|
2020-08-25 15:48:36 -04:00 |
|
github-actions[bot]
|
c12999b9c8
|
Assigned RUSTSEC-2020-0031 to tiny_http (#358)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-08-21 17:59:34 -04:00 |
|
Alex Gaynor
|
52f305fb45
|
renumber this as 0 so the assign ID script handles it (#357)
|
2020-08-21 17:58:10 -04:00 |
|
Sergey "Shnatsel" Davidoff
|
50e585fa5e
|
Merge pull request #355 from snoopysecurity/add-tiny-http-request-smuggling
Add tiny-http Request Smuggling
|
2020-08-21 19:10:18 +02:00 |
|
Sergey "Shnatsel" Davidoff
|
1400f85920
|
drop categories
|
2020-08-21 19:09:16 +02:00 |
|
snoopysecurity
|
d7233ee826
|
Add tiny-http Request Smuggling
|
2020-08-21 10:56:33 +01:00 |
|
Sergey "Shnatsel" Davidoff
|
4b1e065e0c
|
Merge pull request #354 from RustSec/assign-ids
Assigned RUSTSEC-2020-0030 to mozwire
|
2020-08-21 02:57:45 +02:00 |
|
github-actions[bot]
|
9587a27510
|
Assigned RUSTSEC-2020-0030 to mozwire
|
2020-08-21 00:57:05 +00:00 |
|
Sergey "Shnatsel" Davidoff
|
9eb3f9df91
|
Merge pull request #353 from alexanderkjall/master
Missing sanitazion in mozwire allows local file overwrite of files ending in .conf
|
2020-08-21 02:56:24 +02:00 |
|
Alexander Kjäll
|
ba84c3b5f6
|
Missing sanitazion in mozwire allows local file overwrite of files ending in .conf
|
2020-08-19 13:19:03 +02:00 |
|
Sergey "Shnatsel" Davidoff
|
8fba4e52f3
|
fix disclosure date
|
2020-08-15 03:34:56 +02:00 |
|
Sergey "Shnatsel" Davidoff
|
dcbd9baf6e
|
Merge pull request #351 from RustSec/assign-ids
Assigned RUSTSEC-2019-0036 to failure
|
2020-08-15 02:02:28 +02:00 |
|
github-actions[bot]
|
8cfebb1f2b
|
Assigned RUSTSEC-2019-0036 to failure
|
2020-08-14 23:04:44 +00:00 |
|
Sergey "Shnatsel" Davidoff
|
1837ccc396
|
Merge pull request #318 from Qwaz/failure-336
Informational advisory for rust-lang-nursery/failure#336
|
2020-08-15 01:03:56 +02:00 |
|
Yechan Bae
|
7ba77515fa
|
Apply PR feedback
|
2020-08-14 18:15:56 -04:00 |
|
github-actions[bot]
|
90624f4e01
|
Assigned RUSTSEC-2020-0029 to rgb (#350)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-08-14 16:21:16 -04:00 |
|
Sergey "Shnatsel" Davidoff
|
361f5483eb
|
Merge pull request #349 from RustSec/rgb
Add advisory for rgb
|
2020-08-14 22:18:48 +02:00 |
|
Sergey "Shnatsel" Davidoff
|
9611ff4c0e
|
Added note about invariants, specified resolution
|
2020-08-14 21:24:17 +02:00 |
|
Sergey "Shnatsel" Davidoff
|
a61e5b2ca6
|
Fix spelling
Co-authored-by: HeroicKatora <HeroicKatora@users.noreply.github.com>
|
2020-08-14 21:19:39 +02:00 |
|
Sergey "Shnatsel" Davidoff
|
5cc0589551
|
Add advisory for rgb
|
2020-08-14 18:22:30 +02:00 |
|
github-actions[bot]
|
fdc3c78d2c
|
Assigned RUSTSEC-2020-0028 to rocket (#348)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-08-14 11:51:50 -04:00 |
|
Sergey "Shnatsel" Davidoff
|
1b673b14ea
|
Merge pull request #320 from Qwaz/rocket-1312
Informational advisory for SergioBenitez/Rocket#1312
|
2020-08-14 17:40:21 +02:00 |
|
Vinzent Steinberg
|
ee840d4a4d
|
Add some minimal guideline about GHSA (#347)
Fixes #345.
|
2020-08-01 11:43:50 -07:00 |
|
Vinzent Steinberg
|
a7b90acdc2
|
Add alias for GHSA (#346)
Co-authored-by: Tony Arcieri <bascule@gmail.com>
|
2020-08-01 09:40:07 -07:00 |
|
Alex Gaynor
|
ca4219e11d
|
Fixes #334 -- give the assignment PRs a useful commit message (#344)
* Fixes #334 -- give the assignment PRs a useful commit message
* Update assign-ids.yml
|
2020-07-24 14:14:12 -04:00 |
|
github-actions[bot]
|
20dbede595
|
Assign RUSTSEC IDs (#343)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-07-24 10:16:21 -07:00 |
|
Eduardo Sánchez Muñoz
|
36fb0b786c
|
Add advisory for traitobject (#308)
Co-authored-by: Tony Arcieri <bascule@gmail.com>
|
2020-07-24 10:10:30 -07:00 |
|
github-actions[bot]
|
fa0771ddb7
|
Assign RUSTSEC IDs (#342)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-07-24 10:03:49 -07:00 |
|
Vinzent Steinberg
|
6d238619b6
|
Undefined behavior in Rand (#149)
Co-authored-by: Ralf Jung <post@ralfj.de>
Co-authored-by: Tony Arcieri <bascule@gmail.com>
|
2020-07-24 10:00:19 -07:00 |
|
github-actions[bot]
|
ce0b60265d
|
Assign RUSTSEC-2018-0018 to smallvec (#341)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-07-24 11:48:53 -04:00 |
|
Ralf Jung
|
fca3269356
|
add smallvec unsoundness (#337)
|
2020-07-24 11:47:39 -04:00 |
|
github-actions[bot]
|
9ad6be8534
|
Assign RUSTSEC IDs (#340)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-07-24 11:47:27 -04:00 |
|
Ralf Jung
|
ace2be3fca
|
add linked-hash-map unsoundness (#316)
|
2020-07-24 11:46:00 -04:00 |
|
github-actions[bot]
|
c34d120b4f
|
Assign RUSTSEC IDs (#339)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-07-24 11:45:38 -04:00 |
|
Ralf Jung
|
5b2859bf58
|
bigint is unmaintained (#338)
|
2020-07-24 08:34:48 -07:00 |
|
Tony Arcieri
|
33aaadd1fd
|
RUSTSEC-2019-0031: add link to spinning-rs in description (#336)
|
2020-07-13 09:00:20 -07:00 |
|
Sergey "Shnatsel" Davidoff
|
b952f8c409
|
Merge pull request #333 from RustSec/assign-ids
Assign RUSTSEC IDs
|
2020-07-09 22:18:50 +02:00 |
|
github-actions[bot]
|
a5c4d5fc0e
|
Assign RUSTSEC IDs
|
2020-07-09 20:02:07 +00:00 |
|
Sergey "Shnatsel" Davidoff
|
83f70aefc0
|
Merge pull request #332 from iliana/CVE-2020-15093
tough: CVE-2020-15093 / GHSA-5q2r-92f9-4m49
|
2020-07-09 22:01:12 +02:00 |
|
iliana etaoin
|
f17173c999
|
tough: CVE-2020-15093
|
2020-07-09 12:49:48 -07:00 |
|
CreepySkeleton
|
6b10ce0976
|
Update yaml-rust advirsory to indicate clap as non-vulnerable (#331)
|
2020-07-06 08:59:19 -07:00 |
|
Sergey "Shnatsel" Davidoff
|
ecf0648202
|
Merge pull request #330 from RustSec/assign-ids
Assign RUSTSEC IDs
|
2020-07-05 13:49:26 +02:00 |
|
github-actions[bot]
|
6b56bccc8c
|
Assign RUSTSEC IDs
|
2020-07-05 11:48:09 +00:00 |
|
Sergey "Shnatsel" Davidoff
|
fb8d644b16
|
Merge pull request #319 from Qwaz/rulinalg-201
Security advisory for AtheMathmo/rulinalg#201
|
2020-07-05 13:47:30 +02:00 |
|
github-actions[bot]
|
c649f53838
|
Assign RUSTSEC-2020-0022 to ozone (#329)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
|
2020-07-04 16:25:40 -04:00 |
|
Sergey "Shnatsel" Davidoff
|
aead4efb76
|
Merge pull request #328 from Qwaz/ozone
Security advisory for bqv/ozone
|
2020-07-04 22:22:31 +02:00 |
|
Yechan Bae
|
f17f55472c
|
Fix the function path and make the advisory informational
|
2020-07-04 01:53:33 -04:00 |
|