Commit Graph

11 Commits

Author SHA1 Message Date
Tony Arcieri
782efebde9 Revert "Add affected functions to legacy security warnings (#83)"
This reverts commit 0a981e2b6f.

These now need to use the new `affected_paths` attribute, which has a
different (VersionReq-bucketed) format.
2019-01-13 17:31:25 -08:00
Moritz Beller
0a981e2b6f Add affected functions to legacy security warnings (#83)
Add affected functions to advisories

Add `affected_functions` to:

- RUSTSEC-2018-0003
- RUSTSEC-2017-0002
- RUSTSEC-2018-0002
- RUSTSEC-2018-0001
- RUSTSEC-2017-0004
2018-12-21 06:11:32 -08:00
Tony Arcieri
1296249cfb RUSTSEC-2016-0002.toml: use 'affected_os' attribute
Replaces the 'affected_platforms' attribute in rustsec v0.9.
2018-07-26 21:02:15 -07:00
Tony Arcieri
2d9a2632a7 Keywords
Documents the new `keywords` attribute and adds keywords to all current
advisories. These can be consumed by the web UI.
2018-07-24 16:02:35 -07:00
Tony Arcieri
2632340526 Affected Platforms
Documents the use of the `affected_platforms` attribute in advisories,
and adds it to a relevant advisory.
2018-07-24 15:53:43 -07:00
Tony Arcieri
07219b8d17 Assign RUSTSEC-2016-0002 to hyper
Original PR:

https://github.com/RustSec/advisory-db/pull/18
2018-07-24 12:33:49 -07:00
Tony Arcieri
8678a77455 Advisory: hyper HTTPS MitM due to lack of hostname verification 2018-07-24 12:03:59 -07:00
Tony Arcieri
cb81d3ceaa Rename "dwf" TOML tag to "aliases" (closes #36)
Nobody knows what "dwf" is, and the data isn't presently consumed or
surfaced by the `rustsec` crate, so we (hopefully) can rename it without
breaking anything.
2018-07-21 19:47:30 -07:00
Tony Arcieri
79fd13ac6f crates: Add 'id' attribute to all advisories
This is needed to parse them with serde directly from these files (as
opposed to using Advisories.toml)
2018-07-21 15:22:39 -07:00
Tony Arcieri
e867ef7194 Assign RUSTSEC-2017-0002 to hyper
Original PR:

https://github.com/RustSec/advisory-db/pull/12
2017-02-28 09:02:18 -08:00
Sean McArthur
4597f51b45 add advisory for hyper message splitting vulnerability 2017-02-27 15:13:17 -08:00