Tony Arcieri
ec7ca2aa88
Add test to ensure Advisories.toml is well-formed
2017-02-25 23:49:53 -08:00
Tony Arcieri
986c090c06
Merge pull request #8 from RustSec/rename-package-to-crate-name
...
Rename `package` TOML attribute to `crate_name`
2017-02-25 23:16:40 -08:00
Tony Arcieri
f4dbb0d82c
Rename package TOML attribute to crate_name
...
The correct name for a Rust package is a "crate", so something with "crate" is
less ambiguous than "package".
However, "crate" itself is a Rust keyword. To avoid clashes in Rust code which
uses this same attribute name, "crate_name" can be used instead unambigously.
2017-02-25 23:13:36 -08:00
Tony Arcieri
9556f0fdee
Add id to Advisories.toml
...
Clearly this needs to be a less manual process, but we're just getting started
2017-02-25 16:57:33 -08:00
Tony Arcieri
dc3301d1e4
Add date to RUSTSEC-2017-0001
2017-02-25 16:47:52 -08:00
Tony Arcieri
6f3b266664
Assign RUSTSEC-2017-0001 to sodiumoxide
...
Original PR:
https://github.com/RustSec/advisory-db/pull/4
2017-02-25 16:46:26 -08:00
Tony Arcieri
0aeb6b9bd7
Merge pull request #4 from RustSec/sodiumoxide-degenerate-public-keys
...
Advisory: sodiumoxide degenerate public keys
2017-02-25 16:43:37 -08:00
Tony Arcieri
7a62937dd5
Merge pull request #6 from RustSec/advisory-date
...
Add a "date" field to advisories
2017-02-25 16:39:21 -08:00
Tony Arcieri
2141fa43c6
Add a "date" field to advisories
...
Should indicate date of disclosure of the vulnerability
2017-02-25 16:38:30 -08:00
Tony Arcieri
1a18a429fc
Advisory: sodiumoxide degenerate public keys
...
Fixed in sodiumoxide 0.0.14.
See: https://github.com/dnaq/sodiumoxide/issues/154
2017-02-25 16:28:44 -08:00
Tony Arcieri
648ea485b0
Merge pull request #5 from RustSec/advisory-table-header
...
Use [advisory] as the table header for advisories
2017-02-25 16:25:51 -08:00
Tony Arcieri
caac500122
Use [advisory] as the table header for advisories
...
Was previously `[vulnerability]`, but as the contents are a security advisory
it's probably a more apt label.
2017-02-25 16:21:38 -08:00
Tony Arcieri
bccef973f4
Merge pull request #3 from RustSec/advisory-titles
...
Add titles to advisories
2017-02-25 15:43:54 -08:00
Tony Arcieri
efdcc6e849
Add titles to advisories
...
Once again taking a cue from RubySec (but also systems like CVE),
advisories should have a one-liner title
2017-02-25 15:40:22 -08:00
Tony Arcieri
38aa9550ea
Merge pull request #2 from RustSec/unaffected-and-patched-versions
...
Separate "unaffected_versions" and "patched_versions"
2017-02-25 15:38:29 -08:00
Tony Arcieri
c28b7ceb38
Separate "unaffected_versions" and "patched_versions"
...
Taking a cue from RubySec, this splits the original "versions" attribute into
separate ones for versions which were never vulnerable, and ones which include
an explicit fix for a vulnerability.
2017-02-25 15:35:43 -08:00
Tony Arcieri
520426b0f8
Text description of public domain license
2017-02-25 15:12:42 -08:00
Tony Arcieri
d927b503e6
Merge pull request #1 from RustSec/license
...
Dedicate advisory database to the public domain
2017-02-25 15:11:56 -08:00
Tony Arcieri
9b8366731a
Dedicate advisory database to the public domain
2017-02-25 15:10:28 -08:00
Tony Arcieri
9bbd818e18
Add advisory format example
...
This is using the TOML format described in the (presently open) initial RustSec
RFC for security advisories described here:
https://github.com/RustSec/rfcs/pull/1
2017-02-25 15:03:26 -08:00
Tony Arcieri
6c32608b11
Initial commit
2017-02-25 14:37:59 -08:00
