5 Commits

Author	SHA1	Message	Date
Matt Brubeck	7feb037b84	RUSTSEC-2020-0017.md (use-after-free in internment) is fixed (#554) ... The vulnerability in this report was fixed in internment 0.4.0. For details, see https://github.com/droundy/internment/issues/11#issuecomment-758862385.	2021-01-12 11:05:27 -08:00
Yechan Bae	846dfb93a3	Update CVE numbers (#542)	2021-01-04 09:02:59 -08:00
Tony Arcieri	ac125ee29a	Translate database into V3 advisory format (#420) ... As proposed in #240 and tracked in #414, this PR translates all advisories into the new "V3" advisory format, which is based on Markdown with leading TOML front matter. This format makes it easier to see rendered Markdown syntax descriptions, whether rendered by an IDE or GitHub. This should help with both crafting advisories initially as well as review, and ideally encourages more lengthy descriptions. Support for this format shipped in `cargo-audit` v0.12.0 on May 6th, 2020.	2020-10-01 18:29:11 -07:00
Tony Arcieri	8587ec259a	Assign RUSTSEC-2020-0017 to internment (#309) ... Original PR: https://github.com/RustSec/advisory-db/pull/306	2020-06-07 08:19:36 -07:00
Jeremy Fitzhardinge	0f5a2dc239	Add advisory for internment (#306) ... `internment` 0.3.12 has a race condition in ArcIntern::drop which can result in use-after-free.	2020-06-07 07:55:58 -07:00