Commit Graph

775 Commits

Author SHA1 Message Date
github-actions[bot]
ca8a60b7be Assigned RUSTSEC-2021-0044 to rocket (#838)
Co-authored-by: alex <alex@users.noreply.github.com>
2021-03-26 10:23:59 -04:00
Ammar Askar
8f7af7c6c5 [patched] Add advisory for use-after-free in rocket (#834)
* Add advisory for use-after-free in rocket

* Clarify that the UAF can only happen during or after unwinding
2021-03-26 10:17:31 -04:00
github-actions[bot]
40e78f4922 Assigned RUSTSEC-2021-0043 to uu_od (#837)
Co-authored-by: alex <alex@users.noreply.github.com>
2021-03-26 09:07:17 -04:00
Ammar Askar
6265d0dc36 Add advisory for uninitialized exposure in uu_od (#836) 2021-03-26 09:05:12 -04:00
Shnatsel
996a3eca3b Assigned RUSTSEC-2021-0042 to insert_many 2021-03-26 06:43:47 +00:00
Ammar Askar
c742f10bbd Add advisory for double-free in insert_many 2021-03-25 22:57:00 -07:00
github-actions[bot]
3ddeb5c6cf Assigned RUSTSEC-2021-0041 to parse_duration (#829)
Co-authored-by: tarcieri <tarcieri@users.noreply.github.com>
2021-03-24 21:45:20 -07:00
Disconnect3d
3864def6bf parse_duration: parse DoS through payloads with big exponent (#827) 2021-03-24 21:43:09 -07:00
Yechan Bae
cda5b3ffd4 Update CVE numbers (#828) 2021-03-19 14:21:58 -07:00
Shnatsel
0bc081bb02 Assigned RUSTSEC-2021-0040 to arenavec 2021-03-07 15:10:05 +00:00
Sergey "Shnatsel" Davidoff
bcdb169985 Merge pull request #815 from JOE1994/0109-arenavec
arenavec: potential double drop or uninitialized memory drop upon panic
2021-03-07 16:09:38 +01:00
Shnatsel
f2f59e4ec9 Assigned RUSTSEC-2021-0039 to endian_trait 2021-03-07 15:08:31 +00:00
Youngsuk Kim
c2248b0eef arenavec: update advisory title to clarify issue 2021-03-07 09:21:06 -05:00
JOE1994
ef52d55d34 Report 0109-arenavec to RustSec 2021-03-07 00:57:30 -05:00
JOE1994
3205a0919e Report 0090-endian_trait to RustSec 2021-03-07 00:29:24 -05:00
Shnatsel
805270dce5 Assigned RUSTSEC-2021-0038 to fltk 2021-03-06 19:30:02 +00:00
MoAlyousef
a84dbc5d57 formatting 2021-03-06 22:22:50 +03:00
MoAlyousef
35e0ea59a6 replace with keywords 2021-03-06 22:21:27 +03:00
Mohammed Alyousef
d07de9975d Update RUSTSEC-0000-0000.md 2021-03-06 22:02:26 +03:00
Mohammed Alyousef
5ce4048734 Update RUSTSEC-0000-0000.md 2021-03-06 22:02:14 +03:00
MoAlyousef
a33c05d20a add fltk advisory 2021-03-06 22:01:14 +03:00
Shnatsel
dd560c650f Assigned RUSTSEC-2021-0037 to diesel 2021-03-05 13:42:28 +00:00
Georg Semmler
c31f016dce Update crates/diesel/RUSTSEC-0000-0000.md
Co-authored-by: Sergey "Shnatsel" Davidoff <shnatsel@gmail.com>
2021-03-05 12:18:06 +00:00
Georg Semmler
e5c10bccb9 Update crates/diesel/RUSTSEC-0000-0000.md
Co-authored-by: Sergey "Shnatsel" Davidoff <shnatsel@gmail.com>
2021-03-05 09:12:08 +00:00
Georg Semmler
4f30ae8e72 Report use-after-free issue in diesels sqlite backend 2021-03-04 19:15:19 +01:00
Shnatsel
423ca50401 Assigned RUSTSEC-2021-0036 to internment 2021-03-04 15:16:03 +00:00
JOE1994
ac5a6f9239 Report 0162-internment to RustSec 2021-03-04 10:07:34 -05:00
Shnatsel
0f0dbd0675 Assigned RUSTSEC-2020-0147 to rulinalg 2021-03-04 13:58:02 +00:00
Sergey "Shnatsel" Davidoff
e4cc2dfc24 Merge pull request #801 from ammaraskar/rulinalg
Add unmaintained advisory for rulinalg crate
2021-03-04 14:57:11 +01:00
github-actions[bot]
e93938cb63 Assigned RUSTSEC-2021-0035 to quinn (#805)
Co-authored-by: alex <alex@users.noreply.github.com>
2021-03-04 08:01:02 -05:00
Dirkjan Ochtman
a0ec5819c8 Add advisory for invalid layout assumptions in quinn (#804) 2021-03-04 07:59:10 -05:00
Shnatsel
240080a19e Assigned RUSTSEC-2021-0034 to office 2021-03-03 18:06:07 +00:00
Sergey "Shnatsel" Davidoff
d489c26624 Merge pull request #802 from ammaraskar/office
Add unmaintained advisory for office crate. Fixes #742
2021-03-03 18:29:24 +01:00
Ammar Askar
25e792c03f Add unmaintained advisory for office crate. Fixes #742 2021-03-03 07:42:08 -08:00
Ammar Askar
aced392fca Add unmaintained advisory for rulinalg crate 2021-03-03 07:36:23 -08:00
Shnatsel
2e968911c5 Assigned RUSTSEC-2021-0033 to stack_dst 2021-03-03 14:39:29 +00:00
Sergey "Shnatsel" Davidoff
917ae7c2de Merge pull request #799 from ammaraskar/stack_dst
[patched] Add advisory for double-free in stack_dst
2021-03-03 15:38:51 +01:00
Ammar Askar
a0c9d676d4 Add advisory for double-free in stack_dst 2021-03-03 06:36:09 -08:00
Shnatsel
b8b93bd677 Assigned RUSTSEC-2021-0032 to byte_struct 2021-03-02 18:12:07 +00:00
Sergey "Shnatsel" Davidoff
10e79dbffe Merge pull request #796 from ammaraskar/byte_struct
[patched] Add advisory for uninitialized memory drop in byte_struct
2021-03-02 19:11:30 +01:00
Shnatsel
6dc263820d Assigned RUSTSEC-2021-0031 to nano_arena 2021-03-02 18:10:54 +00:00
Sergey "Shnatsel" Davidoff
160d5c7ec2 Merge pull request #795 from ammaraskar/nano_arena
[patched] Add advisory for aliasing violation in nano_arena
2021-03-02 19:09:27 +01:00
Ammar Askar
50db2cc7a3 Add advisory for aliasing violation in nano_arena 2021-03-02 10:07:44 -08:00
Ammar Askar
d9614925ce Add advisory for uninitialized memory drop in byte_struct 2021-03-02 10:04:50 -08:00
Sergey "Shnatsel" Davidoff
0133e8aca6 Merge pull request #792 from RustSec/revert-788-mark-generic-array-advisory-as-unsound
Revert "Mark RUSTSEC-2020-0146 as unsound (#788)"
2021-03-02 18:10:42 +01:00
Shnatsel
8887e3da3a Assigned RUSTSEC-2021-0030 to scratchpad 2021-03-02 17:01:31 +00:00
Sergey "Shnatsel" Davidoff
220fb9e194 Merge pull request #793 from ammaraskar/scratchpad
[patched] Add advisory for double-free in scratchpad
2021-03-02 18:00:53 +01:00
Ammar Askar
e59320ad70 Add advisory for double-free in scratchpad 2021-03-02 08:55:20 -08:00
Sergey "Shnatsel" Davidoff
927b303d20 Revert "Mark RUSTSEC-2020-0146 as unsound (#788)"
This reverts commit 14e6efec55.
2021-03-02 17:03:07 +01:00
Konrad Borowski
14e6efec55 Mark RUSTSEC-2020-0146 as unsound (#788) 2021-03-02 07:30:22 -08:00