Commit Graph

11 Commits

Author SHA1 Message Date
Alexis Mousset
84c633df9c Update aliases from GHSA OSV export (#1693) 2023-06-13 15:10:24 +02:00
David Krasnitsky
b485cf4db1 Update RUSTSEC-2020-0071.md (#1594)
The sources links were published without a hyperlink at: https://rustsec.org/advisories/RUSTSEC-2020-0071

This update is using explicit markdown hyperlinks in hopes that it will be rendered and published correctly.
2023-02-08 16:06:38 +01:00
David Krasnitsky
cb6cfde9a9 Update RUSTSEC-2020-0071.md (#1591) 2023-02-08 15:08:26 +01:00
Alexis Mousset
df51dcdf97 Remove reference mention from description (#1393) 2022-08-28 23:00:20 +02:00
Tony Arcieri
f79eb4bad9 Revert "Withdraw RUSTSEC-2020-0071: Potential segfault in the time crate (#1242)" (#1258)
This reverts commit a47cd63007.

The advisory was withdrawn based on discussions around whether read-only
environment variable access constitutes a vulnerability.

However, per the `time` crate's author @jhpratt, the crate also modifies
the environment and therefore the advisory should *not* be withdrawn:

https://github.com/rustsec/advisory-db/pull/1242#issuecomment-1144903688
2022-06-02 08:37:44 -06:00
David Knaack
a47cd63007 Withdraw RUSTSEC-2020-0071: Potential segfault in the time crate (#1242) 2022-05-13 12:27:52 -06:00
Sergey "Shnatsel" Davidoff
00a1687a13 Update RUSTSEC-2020-0071.md (#1222) 2022-04-18 03:32:20 +02:00
Jacob Pratt
d8701fad2d Add missing method to time vulnerability (#1086) 2021-10-19 16:13:58 -06:00
Jacob Pratt
e7d342f190 Update RUSTEC-2020-0071 (#1078)
This includes the affected functions in time 0.1 and rewords a few
things for clarity.
2021-10-16 22:31:32 -06:00
github-actions[bot]
1d7066d6d1 Assigned RUSTSEC-2020-0071 to time (#486)
Co-authored-by: tarcieri <tarcieri@users.noreply.github.com>
2020-11-18 18:21:00 -08:00
Jacob Pratt
793301b134 Potential segfault in the time crate (#485) 2020-11-18 18:19:28 -08:00