Roy Wellington Ⅳ
|
200651cff2
|
Correct affected version range on RUSTSEC-2019-003[34] to patched at 0.1.20
I believe these two vulnerabilities were patched at 0.1.20.
For RUSTSEC-2019-0033:
The advisory links to the bug: https://github.com/hyperium/http/issues/352
In that bug, the fixing PR was https://github.com/hyperium/http/pull/360
That PR merged the commit 81ceb61 to fix the bug; that commit, according to
GitHub, was first picked up by tag v0.1.20 ([commit][1]).
[1]: 81ceb611cf
For RUSTSEC-2019-0034:
This advisory is two separate GitHub issues against `HeaderMap::drain`,
http #354 and http #355.
For the first: the issue: https://github.com/hyperium/http/issues/354
In that bug, the fixing PR was https://github.com/hyperium/http/pull/357
That PR merged the commit 82d53db to fix the bug; that commit, according to
GitHub, was first picked up by tag v0.1.20 ([commit][2]).
[2]: 82d53dbdfd
For the second: the issue: https://github.com/hyperium/http/issues/355
In that bug, the fixing PR was https://github.com/hyperium/http/pull/362
That PR merged the commit 8ffe094 to fix the bug; that commit, according to
GitHub, was first picked up by tag v0.1.20 ([commit][3]).
[3]: 8ffe094df1
|
2020-01-09 12:20:27 -05:00 |
|
