Commit Graph

276 Commits

Author SHA1 Message Date
github-actions[bot]
a5c4d5fc0e Assign RUSTSEC IDs 2020-07-09 20:02:07 +00:00
iliana etaoin
f17173c999 tough: CVE-2020-15093 2020-07-09 12:49:48 -07:00
CreepySkeleton
6b10ce0976 Update yaml-rust advirsory to indicate clap as non-vulnerable (#331) 2020-07-06 08:59:19 -07:00
github-actions[bot]
6b56bccc8c Assign RUSTSEC IDs 2020-07-05 11:48:09 +00:00
Sergey "Shnatsel" Davidoff
fb8d644b16 Merge pull request #319 from Qwaz/rulinalg-201
Security advisory for AtheMathmo/rulinalg#201
2020-07-05 13:47:30 +02:00
github-actions[bot]
c649f53838 Assign RUSTSEC-2020-0022 to ozone (#329)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-04 16:25:40 -04:00
Sergey "Shnatsel" Davidoff
aead4efb76 Merge pull request #328 from Qwaz/ozone
Security advisory for bqv/ozone
2020-07-04 22:22:31 +02:00
Yechan Bae
ee09393d32 Security advisory for bqv/ozone 2020-07-04 01:49:52 -04:00
github-actions[bot]
73b40e7d53 Assign RUSTSEC IDs (#326)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-07-03 10:11:14 -04:00
Sergey "Shnatsel" Davidoff
c05fb28d6d Merge pull request #293 from NieDzejkob/rio
Advisory for rio
2020-07-03 16:09:14 +02:00
Yechan Bae
49fcc50d2b Reflect PR feedback and describe what might happen 2020-06-30 17:21:28 -04:00
github-actions[bot]
07ae3fb207 Assign RUSTSEC IDs (#325)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-06-30 11:55:00 -07:00
Jeff Muizelaar
6e2241c06b stb_truetype crate has been deprecated; use ttf-parser instead (#307) 2020-06-30 11:52:27 -07:00
Ralf Jung
9cd619f167 make memoffset advisory informational (#317) 2020-06-30 11:49:45 -07:00
github-actions[bot]
46c23f6c94 Assign RUSTSEC IDs (#323)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2020-06-30 10:27:13 -07:00
quininer
de07a7d207 Add tokio-rustls DoS advisory (#304) 2020-06-30 02:01:58 -04:00
Yechan Bae
8149410e8d Fix toml format error 2020-06-29 01:40:06 -04:00
Yechan Bae
7c96397ea1 Security advisory for AtheMathmo/rulinalg#201 2020-06-28 01:48:42 -04:00
Tony Arcieri
5049594b75 Add unmaintained crate advisory for block-cipher-trait (RUSTSEC-2020-0018) (#310)
* Add unmaintained crate advisory for `block-cipher-trait`

It's been renamed to `block-cipher`. See:

https://github.com/RustCrypto/traits/pull/139

* Assign RUSTSEC-2020-0018 to block-cipher-trait
2020-06-10 11:22:55 -07:00
Tony Arcieri
8587ec259a Assign RUSTSEC-2020-0017 to internment (#309)
Original PR: https://github.com/RustSec/advisory-db/pull/306
2020-06-07 08:19:36 -07:00
Jeremy Fitzhardinge
0f5a2dc239 Add advisory for internment (#306)
`internment` 0.3.12 has a race condition in ArcIntern::drop which can
result in use-after-free.
2020-06-07 07:55:58 -07:00
Tony Arcieri
7d4ce9ae4f Assign RUSTSEC-2018-0017 to tempdir
Original PR: https://github.com/RustSec/advisory-db/pull/295
2020-05-17 08:58:19 -07:00
Tony Arcieri
4853671ffa Merge pull request #295 from oherrala/tempdir
tempdir crate has been deprecated since 2018-02-13
2020-05-17 08:54:35 -07:00
Tony Arcieri
1639be6561 Assign RUSTSEC-2020-0016 to net2
Original PR: https://github.com/RustSec/advisory-db/pull/296
2020-05-17 08:52:19 -07:00
Ossi Herrala
a3c68605c7 net2 crate has been deprecated; use socket2 instead
Fixes #285
2020-05-13 10:45:41 +03:00
Ossi Herrala
25f622bacf tempdir crate has been deprecated since 2018-02-13. 2020-05-13 10:18:39 +03:00
Jakub Kądziołka
b1d3a5e73f Advisory for rio 2020-05-12 19:04:44 +02:00
Tony Arcieri
e44e26f397 Assign RUSTSEC-2020-0015 to openssl-src
Original PR: https://github.com/RustSec/advisory-db/pull/277/files
2020-05-04 16:39:42 -07:00
Tony Arcieri
f2feb205c6 Merge pull request #277 from lzutao/cve-openssl
warn about CVE-2020-1967
2020-05-04 16:38:10 -07:00
Manish Goregaokar
2b2b57668d RUSTSEC-2020-0011: make obsolete 2020-04-25 20:47:58 -07:00
Christopher Durham
c63704f56b RUSTSEC-2020-0011: make wording more objective 2020-04-25 15:10:50 -04:00
Tony Arcieri
63ca3a7793 RUSTSEC-2020-0011: mark as informational
See discussion on https://github.com/RustSec/advisory-db/issues/275#issuecomment-619241211
2020-04-25 12:00:31 -07:00
Lzu Tao
cff4f820ac warn about CVE-2020-1967 2020-04-25 15:38:14 +00:00
Tony Arcieri
183f65dfd1 Assign RUSTSEC-2020-0014 to rusqlite
Original PR: https://github.com/RustSec/advisory-db/pull/267
2020-04-24 12:40:14 -07:00
Tony Arcieri
dea12f0602 Merge pull request #267 from thomcc/rusqlite
Add advisory for rusqlite
2020-04-24 12:39:27 -07:00
Tony Arcieri
2d87929fc8 Assign RUSTSEC-2020-0013 to fake-static
Original PR: https://github.com/RustSec/advisory-db/pull/270
2020-04-24 12:37:27 -07:00
Tony Arcieri
79a4b2fe7f Merge pull request #270 from eduardosm/fake-static
Add advisory for fake-static
2020-04-24 12:36:49 -07:00
Tony Arcieri
a4b88992e9 Assign RUSTSEC-2020-0012 to os_str_bytes
Original PR: https://github.com/RustSec/advisory-db/pull/269
2020-04-24 12:35:29 -07:00
Tony Arcieri
e64a5618c6 Merge pull request #269 from eduardosm/os_str_bytes
Add advisory for os_str_bytes
2020-04-24 12:34:37 -07:00
Tony Arcieri
2a0ed62cd1 Assign RUSTSEC-2020-0011 to plutonium
Original PR: https://github.com/RustSec/advisory-db/pull/268
2020-04-24 12:30:55 -07:00
Eduardo Sánchez Muñoz
6e85444c98 Add advisory for fake-static 2020-04-24 12:57:07 +02:00
Naja Melan
ab1840c2be Try an empty array for patched versions.
Co-Authored-By: Tony Arcieri <bascule@gmail.com>
2020-04-24 06:05:59 +00:00
Eduardo Sánchez Muñoz
16a2f4c592 Add advisory for os_str_bytes 2020-04-24 00:23:27 +02:00
Naja Melan
b761cd7428 Advisory for plutonium. 2020-04-23 23:26:08 +02:00
Thom Chiovoloni
f8c59e28af Add advisory for rusqlite 2020-04-23 10:29:27 -07:00
Tony Arcieri
7a2a72d069 Assign RUSTSEC-2017-0007 to lz4-compress
Original PR: https://github.com/RustSec/advisory-db/pull/264
2020-04-16 17:23:59 -07:00
Sergey "Shnatsel" Davidoff
6282ddf273 change advisory number to pass the linter 2020-04-17 02:07:56 +02:00
Sergey "Shnatsel" Davidoff
bbcceb735f Mark lz4-compress as unmaintained 2020-04-17 02:04:58 +02:00
Tony Arcieri
c427489358 Assign RUSTSEC-2020-0010 to tiberius
Original PR: https://github.com/RustSec/advisory-db/pull/262
2020-04-16 08:59:42 -07:00
Tony Arcieri
cce1d47240 Add tiberius unmaintained advisory 2020-04-16 08:46:03 -07:00