OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-03 10:05:26 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,176 Commits 1 Branch 0 Tags
9c16fb05f7ef17db5fe627acdebeefdcf19f3ee2
Commit Graph

711 Commits

Author SHA1 Message Date
Sergey "Shnatsel" Davidoff
9c16fb05f7 Merge pull request #778 from jonasbb/heapless 
heapless: use-after-free when cloning partially consumed Iterator
 2021-02-27 02:03:32 +01:00
Jonas Bushart
12033122b3 heapless: use-after-free when cloning partially consumed Iterator 2021-02-26 23:55:46 +01:00
Yechan Bae
b724f12a5b Update CVE numbers (#777) 
* Update CVE numbers

* Fix RUSTSEC-2020-0093

* Add another alias for async-h1 crate
 2021-02-25 20:00:25 -05:00
Mikhail "L117" Nikolenko
5775f25882 Fixed memory corruption. (#776) 2021-02-22 08:21:17 -05:00
Shnatsel
a1aa21364f Assigned RUSTSEC-2021-0026 to comrak 2021-02-21 02:45:58 +00:00
Kohei Morita
3aada4c4d8 Add advisory on comrak XSS 
Signed-off-by: Kohei Morita <mrtc0@ssrf.in>
 2021-02-21 11:22:07 +09:00
Shnatsel
96b1688755 Assigned RUSTSEC-2021-0024 to safe-api, RUSTSEC-2021-0025 to jsonrpc-quic 2021-02-15 16:43:30 +00:00
Stephen Coyle
55026f94f3 Add unmaintained crate advisory for jsonrpc-quic 
Renamed to `qjsonrpc`.
 2021-02-15 16:19:30 +00:00
Stephen Coyle
c2e8d57fbd Add unmaintained crate advisory for safe-api 
Renamed to `sn_api`.
 2021-02-15 16:08:19 +00:00
github-actions[bot]
7c81bd4fc3 Assigned RUSTSEC-2021-0023 to rand_core (#771) 
Co-authored-by: tarcieri <tarcieri@users.noreply.github.com>
 2021-02-15 07:35:47 -08:00
Diggory Hardy
221ec336f9 rand_core: incorrect check on buffer length when seeding RNGs (#764) 2021-02-15 07:31:38 -08:00
Shnatsel
be43bc8c83 Assigned RUSTSEC-2021-0022 to yottadb 2021-02-15 01:03:11 +00:00
Sergey "Shnatsel" Davidoff
102fad06fd Merge pull request #769 from jyn514/ydbrust 
Add use-after-free advisory for `yottadb 1.1.0` and earlier
 2021-02-15 02:02:47 +01:00
Joshua Nelson
8b0681777f Add use-after-free advisory for yottadb 1.1.0 and earlier 
Note that this does not have an `informational = "unsound"` field
because the use-after-free can occur even with normal use of the
library, not with specially crafted or malicious usages.
 2021-02-14 19:56:22 -05:00
Shnatsel
18b2916a5d Assigned RUSTSEC-2021-0021 to nb-connect 2021-02-14 15:42:50 +00:00
Sergey "Shnatsel" Davidoff
4f422c4e50 Merge pull request #765 from faern/nb-connect-socketaddr 
Add advisory on nb-connect SocketAddr casting
 2021-02-14 16:42:23 +01:00
Kornel
d0689e3724 Fixed sized-chunks 2021-02-14 12:08:19 +00:00
Linus Färnstrand
2b29694072 Add advisory on nb-connect SocketAddr casting 2021-02-14 12:09:55 +01:00
github-actions[bot]
0283f676ac Assigned RUSTSEC-2020-0144 to lzw (#761) 
Co-authored-by: tarcieri <tarcieri@users.noreply.github.com>
 2021-02-10 10:27:15 -08:00
HeroicKatora
fb29bc7093 lzw: Unmaintained (#760) 2021-02-10 10:25:38 -08:00
Shnatsel
4467b1f895 Assigned RUSTSEC-2021-0020 to hyper 2021-02-05 23:03:32 +00:00
Sean McArthur
c55cf597e8 Add hyper wrong transfer-encoding advisory 2021-02-05 14:57:30 -08:00
ab-cgh
24aaac905f Add advisory URL to RUSTSEC-2021-0019 (#756) 
Co-authored-by: ABGH, C <>
 2021-02-05 12:01:59 -08:00
Shnatsel
7cc4f4cb71 Assigned RUSTSEC-2021-0019 to xcb 2021-02-04 20:04:16 +00:00
Sergey "Shnatsel" Davidoff
2253445a08 Update RUSTSEC-0000-0000.md 2021-02-04 20:54:11 +01:00
Uli Schlachter
f2c5747e9f Report various rust-xcb issues to RustSec 
Closes: https://github.com/RustSec/advisory-db/issues/653
 2021-02-04 19:40:03 +01:00
Shnatsel
11a7ea188a Assigned RUSTSEC-2021-0018 to qwutils 2021-02-04 17:20:22 +00:00
Ammar Askar
81081c1c77 Add advisory for double-free in qwutils 2021-02-04 09:17:53 -08:00
Shnatsel
ace29ae4c1 Assigned RUSTSEC-2020-0143 to multiqueue 2021-02-04 13:37:11 +00:00
JOE1994
00001473c7 Report 0125-multiqueue to RustSec 2021-02-03 22:01:53 -05:00
Yechan Bae
f898b07b9a Update date field 2021-02-03 11:45:30 -05:00
Johann Tuffe
93e896d0d0 add patched version for calamine 2021-02-03 21:48:31 +08:00
Shnatsel
f60715bfd3 Assigned RUSTSEC-2020-0142 to syncpool 2021-02-02 17:07:44 +00:00
Sergey "Shnatsel" Davidoff
dff8798e3f Merge pull request #654 from JOE1994/0051-syncpool 
syncpool: Send bound needed on T (for Send impl of `Bucket2`)
 2021-02-02 18:06:03 +01:00
Sergey "Shnatsel" Davidoff
8c2bbad5cb add patched version 2021-02-02 18:05:12 +01:00
Shnatsel
ffe5e3d69d Assigned RUSTSEC-2020-0141 to noise_search 2021-02-01 13:58:53 +00:00
Sergey "Shnatsel" Davidoff
e9012b0ead Merge pull request #731 from JOE1994/0060-noise_search 
noise_search: `MvccRwLock` allows data races & aliasing violations
 2021-02-01 14:58:19 +01:00
o0Ignition0o
61042bf517 Lever 0.1.1 patch 2021-02-01 12:57:26 +01:00
Youngsuk Kim
7ef8c3d234 Update advisory for 'noise_search' crate 2021-01-31 23:24:23 -05:00
JOE1994
313915b6c1 Report 0060-noise_search to RustSec 2021-01-31 23:19:36 -05:00
Shnatsel
1417344471 Assigned RUSTSEC-2021-0017 to postscript 2021-01-31 14:30:08 +00:00
JOE1994
6f17443c22 Report 0118-postscript to RustSec 2021-01-31 09:28:41 -05:00
Yechan Bae
a19397dee4 Add thread-safety category to relevant bugs 2021-01-30 23:02:50 -05:00
Shnatsel
cdf5a460d8 Assigned RUSTSEC-2021-0016 to ms3d 2021-01-31 00:46:34 +00:00
JOE1994
91edd1b4e5 Report 0112-ms3d to RustSec 2021-01-30 19:40:14 -05:00
Lucas Fernandes Nogueira
18000b07d4 chore(tiny_http): RUSTSEC 2020-0031 patched on 0.8.0 (#721) 2021-01-30 18:50:32 -05:00
Shnatsel
4fe084f570 Assigned RUSTSEC-2020-0140 to model 2021-01-30 18:50:57 +00:00
Sergey "Shnatsel" Davidoff
9d2ef2976c Merge pull request #578 from Qwaz/0034-model 
model: `Shared` can cause a data race
 2021-01-30 19:50:28 +01:00
Shnatsel
4cf1793805 Assigned RUSTSEC-2020-0139 to dces 2021-01-30 18:42:52 +00:00
Sergey "Shnatsel" Davidoff
5b0899c27c Merge pull request #590 from ammaraskar/dces 
Add advisory for data race in dces
 2021-01-30 19:42:20 +01:00