Commit Graph

1224 Commits

Author SHA1 Message Date
Sergey "Shnatsel" Davidoff
e4cc2dfc24 Merge pull request #801 from ammaraskar/rulinalg
Add unmaintained advisory for rulinalg crate
2021-03-04 14:57:11 +01:00
github-actions[bot]
e93938cb63 Assigned RUSTSEC-2021-0035 to quinn (#805)
Co-authored-by: alex <alex@users.noreply.github.com>
2021-03-04 08:01:02 -05:00
Dirkjan Ochtman
a0ec5819c8 Add advisory for invalid layout assumptions in quinn (#804) 2021-03-04 07:59:10 -05:00
Sergey "Shnatsel" Davidoff
03292ba192 Merge pull request #803 from RustSec/assign-ids
Assigned RUSTSEC-2021-0034 to office
2021-03-03 19:15:35 +01:00
Shnatsel
240080a19e Assigned RUSTSEC-2021-0034 to office 2021-03-03 18:06:07 +00:00
Sergey "Shnatsel" Davidoff
d489c26624 Merge pull request #802 from ammaraskar/office
Add unmaintained advisory for office crate. Fixes #742
2021-03-03 18:29:24 +01:00
Ammar Askar
25e792c03f Add unmaintained advisory for office crate. Fixes #742 2021-03-03 07:42:08 -08:00
Ammar Askar
aced392fca Add unmaintained advisory for rulinalg crate 2021-03-03 07:36:23 -08:00
Sergey "Shnatsel" Davidoff
fe5f044f5c Merge pull request #800 from RustSec/assign-ids
Assigned RUSTSEC-2021-0033 to stack_dst
2021-03-03 15:39:39 +01:00
Shnatsel
2e968911c5 Assigned RUSTSEC-2021-0033 to stack_dst 2021-03-03 14:39:29 +00:00
Sergey "Shnatsel" Davidoff
917ae7c2de Merge pull request #799 from ammaraskar/stack_dst
[patched] Add advisory for double-free in stack_dst
2021-03-03 15:38:51 +01:00
Ammar Askar
a0c9d676d4 Add advisory for double-free in stack_dst 2021-03-03 06:36:09 -08:00
Sergey "Shnatsel" Davidoff
56ae8c0b53 Merge pull request #798 from RustSec/assign-ids
Assigned RUSTSEC-2021-0032 to byte_struct
2021-03-02 19:12:30 +01:00
Shnatsel
b8b93bd677 Assigned RUSTSEC-2021-0032 to byte_struct 2021-03-02 18:12:07 +00:00
Sergey "Shnatsel" Davidoff
10e79dbffe Merge pull request #796 from ammaraskar/byte_struct
[patched] Add advisory for uninitialized memory drop in byte_struct
2021-03-02 19:11:30 +01:00
Sergey "Shnatsel" Davidoff
6d4216ab07 Merge pull request #797 from RustSec/assign-ids
Assigned RUSTSEC-2021-0031 to nano_arena
2021-03-02 19:11:08 +01:00
Shnatsel
6dc263820d Assigned RUSTSEC-2021-0031 to nano_arena 2021-03-02 18:10:54 +00:00
Sergey "Shnatsel" Davidoff
160d5c7ec2 Merge pull request #795 from ammaraskar/nano_arena
[patched] Add advisory for aliasing violation in nano_arena
2021-03-02 19:09:27 +01:00
Ammar Askar
50db2cc7a3 Add advisory for aliasing violation in nano_arena 2021-03-02 10:07:44 -08:00
Ammar Askar
d9614925ce Add advisory for uninitialized memory drop in byte_struct 2021-03-02 10:04:50 -08:00
Sergey "Shnatsel" Davidoff
0133e8aca6 Merge pull request #792 from RustSec/revert-788-mark-generic-array-advisory-as-unsound
Revert "Mark RUSTSEC-2020-0146 as unsound (#788)"
2021-03-02 18:10:42 +01:00
Sergey "Shnatsel" Davidoff
3d4434557f Merge pull request #794 from RustSec/assign-ids
Assigned RUSTSEC-2021-0030 to scratchpad
2021-03-02 18:01:41 +01:00
Shnatsel
8887e3da3a Assigned RUSTSEC-2021-0030 to scratchpad 2021-03-02 17:01:31 +00:00
Sergey "Shnatsel" Davidoff
220fb9e194 Merge pull request #793 from ammaraskar/scratchpad
[patched] Add advisory for double-free in scratchpad
2021-03-02 18:00:53 +01:00
Ammar Askar
e59320ad70 Add advisory for double-free in scratchpad 2021-03-02 08:55:20 -08:00
Sergey "Shnatsel" Davidoff
927b303d20 Revert "Mark RUSTSEC-2020-0146 as unsound (#788)"
This reverts commit 14e6efec55.
2021-03-02 17:03:07 +01:00
Konrad Borowski
14e6efec55 Mark RUSTSEC-2020-0146 as unsound (#788) 2021-03-02 07:30:22 -08:00
Emil Fresk
196ad433d8 Heapless soundness fix since 0.6.1 (#791) 2021-03-02 07:12:22 -08:00
Sergey Potapov
1c7888e4ee Update RUSTSEC-2020-0146.md with list of patched versions (#789)
* Update RUSTSEC-2020-0146.md with list of patched versions

* Update crates/generic-array/RUSTSEC-2020-0146.md

Co-authored-by: Alex Gaynor <alex.gaynor@gmail.com>
2021-03-02 08:48:41 -05:00
Sergey "Shnatsel" Davidoff
f40461ca33 Merge pull request #787 from RustSec/assign-ids
Assigned RUSTSEC-2021-0029 to truetype
2021-03-01 21:35:42 +01:00
Shnatsel
dafd2019df Assigned RUSTSEC-2021-0029 to truetype 2021-03-01 20:33:53 +00:00
Sergey "Shnatsel" Davidoff
b06be14404 Merge pull request #786 from ammaraskar/truetype
[patched] Report uninitialized memory exposure in truetype
2021-03-01 21:33:26 +01:00
Ammar Askar
b4afb832c4 Report uninitialized memory exposure in truetype 2021-03-01 11:54:59 -08:00
Sergey "Shnatsel" Davidoff
cd4878b739 Merge pull request #785 from RustSec/assign-ids
Assigned RUSTSEC-2021-0028 to toodee
2021-03-01 20:43:22 +01:00
Shnatsel
f4e465c615 Assigned RUSTSEC-2021-0028 to toodee 2021-03-01 19:42:57 +00:00
Sergey "Shnatsel" Davidoff
d1853a7aeb Merge pull request #784 from ammaraskar/toodee
[patched] Add advisory for memory safety issue in toodee's insert_row
2021-03-01 20:42:30 +01:00
Ammar Askar
af1b1de41f Add advisory for memory safety issue in toodee's insert_row 2021-03-01 11:39:59 -08:00
Sergey "Shnatsel" Davidoff
e8998cb802 Merge pull request #783 from RustSec/assign-ids
Assigned RUSTSEC-2021-0027 to bam
2021-03-01 20:17:07 +01:00
Shnatsel
fae9025168 Assigned RUSTSEC-2021-0027 to bam 2021-03-01 19:16:34 +00:00
Sergey "Shnatsel" Davidoff
2b86f618e0 Merge pull request #782 from ammaraskar/bam
[patched] Add advisory for out-of-bounds write in bam
2021-03-01 20:15:51 +01:00
Ammar Askar
fe25ca02b8 Add advisory for out-of-bounds write in bam 2021-03-01 11:11:44 -08:00
Sergey "Shnatsel" Davidoff
1794caeec1 Merge pull request #781 from RustSec/assign-ids
Assigned RUSTSEC-2020-0146 to generic-array
2021-03-01 15:06:50 +01:00
Shnatsel
c71170c328 Assigned RUSTSEC-2020-0146 to generic-array 2021-03-01 14:06:15 +00:00
Sergey "Shnatsel" Davidoff
e66a47c5aa Merge pull request #780 from xfix/generic-array-arr-unsoundness
Add an advisory on lifetime extension in generic-array
2021-03-01 15:05:45 +01:00
Konrad Borowski
eda0a2235a Add an advisory on lifetime extension in generic-array 2021-03-01 14:24:05 +01:00
Sergey "Shnatsel" Davidoff
6d1fcd97c7 Merge pull request #779 from RustSec/assign-ids
Assigned RUSTSEC-2020-0145 to heapless
2021-02-27 02:05:50 +01:00
Shnatsel
7c260c52d1 Assigned RUSTSEC-2020-0145 to heapless 2021-02-27 01:05:30 +00:00
Sergey "Shnatsel" Davidoff
9283d50ad0 heapless: fix year: 2020, not 2010 2021-02-27 02:05:08 +01:00
Sergey "Shnatsel" Davidoff
9c16fb05f7 Merge pull request #778 from jonasbb/heapless
heapless: use-after-free when cloning partially consumed Iterator
2021-02-27 02:03:32 +01:00
Jonas Bushart
12033122b3 heapless: use-after-free when cloning partially consumed Iterator 2021-02-26 23:55:46 +01:00