Commit Graph

5 Commits

Author SHA1 Message Date
Sergey "Shnatsel" Davidoff
7797133c67 Add CVE mapping 2020-03-18 17:15:13 +01:00
Tony Arcieri
64c17acfe3 Migrate all advisories to V2 format (closes #228)
As announced in #228, this commit migrates all advisories to the new V2
format, which splits version information into a separate section, and
now has a structure which corresponds to the internal code structure of
the `rustsec` crate.

This is a breaking change for users of `cargo-audit` < 0.9, and anyone
who has written a 3rd party advisory format parser.
2020-03-01 10:46:35 -08:00
Tony Arcieri
01ac6725d5 Fix all advisories to pass linter
Mostly related to the `affected_functions` field, which has changed a
few times.
2019-09-09 12:19:01 -07:00
Tony Arcieri
66fe537fdc Assign RUSTSEC-2019-0019 to blake2
Original PR: https://github.com/RustSec/advisory-db/pull/151
2019-09-06 13:45:25 -07:00
Tony Arcieri
6d0db7286e Add advisory for broken blake2 impls
BLAKE2b and BLAKE2s were implemented using the wrong block size. All
versions of the `blake2` crate prior to v0.8.1 compute incorrect
digests.

See: https://github.com/RustCrypto/MACs/issues/19
2019-09-06 10:46:06 -07:00