OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-29 07:46:22 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,119 Commits 1 Branch 0 Tags
ed0bb5ee162e623e45d11a88bf0fe485db33e8b4
Commit Graph

1119 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Sergey "Shnatsel" Davidoff
ed0bb5ee16 Merge pull request #734 from RustSec/assign-ids 
Assigned RUSTSEC-2020-0141 to noise_search
 2021-02-01 14:59:52 +01:00
Shnatsel
ffe5e3d69d Assigned RUSTSEC-2020-0141 to noise_search 2021-02-01 13:58:53 +00:00
Sergey "Shnatsel" Davidoff
e9012b0ead Merge pull request #731 from JOE1994/0060-noise_search 
noise_search: `MvccRwLock` allows data races & aliasing violations
 2021-02-01 14:58:19 +01:00
Sergey "Shnatsel" Davidoff
a2b63f4b82 Merge pull request #732 from o0Ignition0o/igni/lever_0.1.1 
Lever 0.1.1 patch
 2021-02-01 14:55:54 +01:00
o0Ignition0o
61042bf517 Lever 0.1.1 patch 2021-02-01 12:57:26 +01:00
Youngsuk Kim
7ef8c3d234 Update advisory for 'noise_search' crate 2021-01-31 23:24:23 -05:00
JOE1994
313915b6c1 Report 0060-noise_search to RustSec 2021-01-31 23:19:36 -05:00
Sergey "Shnatsel" Davidoff
a1ebd36374 Merge pull request #729 from RustSec/assign-ids 
Assigned RUSTSEC-2021-0017 to postscript
 2021-01-31 15:30:51 +01:00
Shnatsel
1417344471 Assigned RUSTSEC-2021-0017 to postscript 2021-01-31 14:30:08 +00:00
Sergey "Shnatsel" Davidoff
04fe6be48a Merge pull request #728 from JOE1994/0118-postscript 
postscript: `Read` on uninitialized buffer may cause UB (`impl Walue for Vec<u8>`)
 2021-01-31 15:29:34 +01:00
JOE1994
6f17443c22 Report 0118-postscript to RustSec 2021-01-31 09:28:41 -05:00
Sergey "Shnatsel" Davidoff
ceefe80319 Merge pull request #726 from Qwaz/update-category 
Add thread-safety category to relevant bugs
 2021-01-31 14:02:27 +01:00
Yechan Bae
a19397dee4 Add thread-safety category to relevant bugs 2021-01-30 23:02:50 -05:00
Sergey "Shnatsel" Davidoff
fc35f7ab11 Merge pull request #724 from RustSec/assign-ids 
Assigned RUSTSEC-2021-0016 to ms3d
 2021-01-31 01:47:35 +01:00
Shnatsel
cdf5a460d8 Assigned RUSTSEC-2021-0016 to ms3d 2021-01-31 00:46:34 +00:00
Sergey "Shnatsel" Davidoff
1640747e83 Merge pull request #723 from JOE1994/0112-ms3d 
ms3d: `IoReader::read()`: user-provided `Read` on uninitialized buffer may cause UB
 2021-01-31 01:46:02 +01:00
JOE1994
91edd1b4e5 Report 0112-ms3d to RustSec 2021-01-30 19:40:14 -05:00
Lucas Fernandes Nogueira
18000b07d4 chore(tiny_http): RUSTSEC 2020-0031 patched on 0.8.0 (#721) 2021-01-30 18:50:32 -05:00
Sergey "Shnatsel" Davidoff
faa37a1c37 Merge pull request #719 from RustSec/assign-ids 
Assigned RUSTSEC-2020-0140 to model
 2021-01-30 19:56:21 +01:00
Shnatsel
4fe084f570 Assigned RUSTSEC-2020-0140 to model 2021-01-30 18:50:57 +00:00
Sergey "Shnatsel" Davidoff
9d2ef2976c Merge pull request #578 from Qwaz/0034-model 
model: `Shared` can cause a data race
 2021-01-30 19:50:28 +01:00
Sergey "Shnatsel" Davidoff
7f39bb2e30 Merge pull request #717 from RustSec/assign-ids 
Assigned RUSTSEC-2020-0139 to dces
 2021-01-30 19:43:35 +01:00
Shnatsel
4cf1793805 Assigned RUSTSEC-2020-0139 to dces 2021-01-30 18:42:52 +00:00
Sergey "Shnatsel" Davidoff
5b0899c27c Merge pull request #590 from ammaraskar/dces 
Add advisory for data race in dces
 2021-01-30 19:42:20 +01:00
Sergey "Shnatsel" Davidoff
95c9745ff1 Merge pull request #715 from RustSec/assign-ids 
Assigned RUSTSEC-2020-0136 to toolshed, RUSTSEC-2021-0015 to calamine, RUSTSEC-2020-0137 to lever, RUSTSEC-2020-0138 to lexer
 2021-01-30 19:23:57 +01:00
Shnatsel
c86c580d8c Assigned RUSTSEC-2020-0136 to toolshed, RUSTSEC-2021-0015 to calamine, RUSTSEC-2020-0137 to lever, RUSTSEC-2020-0138 to lexer 2021-01-30 18:22:48 +00:00
Sergey "Shnatsel" Davidoff
c005d5b38a Merge pull request #589 from ammaraskar/lever 
Add advisory for data race in lever
 2021-01-30 19:22:11 +01:00
Sergey "Shnatsel" Davidoff
ba36f96be6 Merge pull request #591 from ammaraskar/toolshed 
Add advisory for data race in toolshed
 2021-01-30 19:20:44 +01:00
Sergey "Shnatsel" Davidoff
a51e8a6dfc Merge pull request #594 from JOE1994/calamine 
calamine: access unclaimed/uninitialized memory
 2021-01-30 19:20:21 +01:00
Sergey "Shnatsel" Davidoff
d791cc4bc5 Merge pull request #595 from JOE1994/lexer 
data race in lexer::ReaderResult<T, E>
 2021-01-30 19:19:56 +01:00
Sergey "Shnatsel" Davidoff
8013cb8831 Merge pull request #713 from RustSec/assign-ids 
Assigned RUSTSEC-2020-0133 to scottqueue, RUSTSEC-2020-0134 to parc, RUSTSEC-2020-0135 to slock
 2021-01-30 19:17:37 +01:00
Shnatsel
e2ee9c8951 Assigned RUSTSEC-2020-0133 to scottqueue, RUSTSEC-2020-0134 to parc, RUSTSEC-2020-0135 to slock 2021-01-30 18:16:30 +00:00
Sergey "Shnatsel" Davidoff
9668bab553 Merge pull request #650 from JOE1994/0038-parc 
`LockWeak<T>` allows to create data race to `T`
 2021-01-30 19:16:00 +01:00
Sergey "Shnatsel" Davidoff
bf315a19e5 Merge pull request #651 from JOE1994/0043-scottqueue 
scottqueue: Queue<T> should have a Send bound on its Send/Sync traits
 2021-01-30 19:15:35 +01:00
Sergey "Shnatsel" Davidoff
fa635de910 Merge pull request #652 from JOE1994/0049-slock 
slock: Slock<T> allows sending non-Send types across thread boundaries
 2021-01-30 19:15:16 +01:00
Sergey "Shnatsel" Davidoff
dc73f9d1c7 Merge pull request #711 from RustSec/assign-ids 
Assigned RUSTSEC-2020-0130 to bunch, RUSTSEC-2020-0131 to rcu_cell, RUSTSEC-2020-0132 to array-tools
 2021-01-30 19:13:59 +01:00
Shnatsel
4b81ce92df Assigned RUSTSEC-2020-0130 to bunch, RUSTSEC-2020-0131 to rcu_cell, RUSTSEC-2020-0132 to array-tools 2021-01-30 18:13:16 +00:00
Sergey "Shnatsel" Davidoff
af57cca99e Merge pull request #665 from JOE1994/0083-array-tools 
array-tools: `FixedCapacityDequeLike::clone()` can cause dropping uninitialized memory
 2021-01-30 19:12:48 +01:00
Sergey "Shnatsel" Davidoff
672db61041 Merge pull request #691 from JOE1994/0036-bunch 
bunch: Bunch<T> unconditionally implements Send/Sync, allowing data races
 2021-01-30 19:11:27 +01:00
Sergey "Shnatsel" Davidoff
cef67eb321 Merge pull request #692 from JOE1994/0039-rcu_cell 
rcu_cell: Send/Sync bound needed on T  for Send/Sync impl of RcuCell<T>
 2021-01-30 19:11:05 +01:00
Sergey "Shnatsel" Davidoff
7a1e834f10 Merge pull request #709 from RustSec/assign-ids 
Assigned RUSTSEC-2020-0124 to async-coap, RUSTSEC-2020-0125 to convec, RUSTSEC-2020-0126 to signal-simple, RUSTSEC-2020-0127 to v9, RUSTSEC-2020-0128 to cache, RUSTSEC-2020-0129 to kekbit
 2021-01-30 19:07:48 +01:00
Shnatsel
d874d3d054 Assigned RUSTSEC-2020-0124 to async-coap, RUSTSEC-2020-0125 to convec, RUSTSEC-2020-0126 to signal-simple, RUSTSEC-2020-0127 to v9, RUSTSEC-2020-0128 to cache, RUSTSEC-2020-0129 to kekbit 2021-01-30 18:07:13 +00:00
Sergey "Shnatsel" Davidoff
bd29fc0d7b Merge pull request #693 from JOE1994/0057-async-coap 
async-coap: ArcGuard's Send and Sync should have bounds on RC
 2021-01-30 19:06:37 +01:00
Sergey "Shnatsel" Davidoff
a0c0baf2dd Merge pull request #694 from JOE1994/0044-signal-simple 
signal-simple: SyncChannel<T> can send non-Send types to other threads
 2021-01-30 19:06:12 +01:00
Sergey "Shnatsel" Davidoff
65da9c554e Merge pull request #704 from JOE1994/0030-cache 
Cache<K>: Send/Sync impls needs trait bounds on `K`
 2021-01-30 19:05:45 +01:00
Sergey "Shnatsel" Davidoff
a51d26eb1e Merge pull request #705 from JOE1994/0023-convec 
convec::ConVec<T> unconditionally implements Send/Sync
 2021-01-30 19:05:27 +01:00
Sergey "Shnatsel" Davidoff
c73804f60f Merge pull request #706 from JOE1994/0066-kekbit 
kekbit: ShmWriter allows sending non-Send type across threads
 2021-01-30 19:05:02 +01:00
Sergey "Shnatsel" Davidoff
c5d9a00ed6 Merge pull request #707 from JOE1994/0065-v9 
v9: SyncRef's clone() and debug() allow data races
 2021-01-30 19:04:45 +01:00
JOE1994
1dfb30f0d3 Report 0065-v9 to RustSec 2021-01-27 12:26:52 -05:00
JOE1994
1446b62471 Report 0066-kekbit to RustSec 2021-01-27 12:11:22 -05:00