Commit Graph

4 Commits

Author SHA1 Message Date
Tony Arcieri
64c17acfe3 Migrate all advisories to V2 format (closes #228)
As announced in #228, this commit migrates all advisories to the new V2
format, which splits version information into a separate section, and
now has a structure which corresponds to the internal code structure of
the `rustsec` crate.

This is a breaking change for users of `cargo-audit` < 0.9, and anyone
who has written a 3rd party advisory format parser.
2020-03-01 10:46:35 -08:00
Tony Arcieri
5b35b71cf7 Add patched_versions to informational advisories
Its absence breaks older versions of cargo-audit:

    $ cargo audit
    Fetching advisory database from `https://github.com/RustSec/advisory-db.git`
    error: error loading advisory database: couldn't parse data: missing field `patched_versions` for key `advisory`
    Exited with code 1
2019-10-08 07:34:43 -07:00
Tony Arcieri
590d83fbb6 Assign RUSTSEC-2016-0004 (informational) to libusb
Marking as unmaintained per:

https://github.com/RustSec/advisory-db/pull/180
2019-10-07 21:23:07 -07:00
Tony Arcieri
b47fff1658 Add unmaintained crate informational advisory: libusb
No releases since 2016 and no responses from the author about its
maintenance status; with several open PRs and issues:

https://github.com/dcuddeback/libusb-rs/issues/33

Recommending `rusb`, a maintained fork, as a successor:

https://github.com/a1ien/rusb
2019-10-07 21:22:45 -07:00