Commit Graph

  • fb8d644b16 Merge pull request #319 from Qwaz/rulinalg-201 Sergey "Shnatsel" Davidoff 2020-07-05 13:47:30 +02:00
  • c649f53838 Assign RUSTSEC-2020-0022 to ozone (#329) github-actions[bot] 2020-07-04 16:25:40 -04:00
  • aead4efb76 Merge pull request #328 from Qwaz/ozone Sergey "Shnatsel" Davidoff 2020-07-04 22:22:31 +02:00
  • f17f55472c Fix the function path and make the advisory informational Yechan Bae 2020-07-04 01:53:33 -04:00
  • ee09393d32 Security advisory for bqv/ozone Yechan Bae 2020-07-04 01:49:52 -04:00
  • 73b40e7d53 Assign RUSTSEC IDs (#326) github-actions[bot] 2020-07-03 10:11:14 -04:00
  • c05fb28d6d Merge pull request #293 from NieDzejkob/rio Sergey "Shnatsel" Davidoff 2020-07-03 16:09:14 +02:00
  • 297725a166 README.md: bump maintained quarter comment Tony Arcieri 2020-07-01 15:53:49 -07:00
  • 49fcc50d2b Reflect PR feedback and describe what might happen Yechan Bae 2020-06-30 17:21:28 -04:00
  • 07ae3fb207 Assign RUSTSEC IDs (#325) github-actions[bot] 2020-06-30 11:55:00 -07:00
  • 6e2241c06b stb_truetype crate has been deprecated; use ttf-parser instead (#307) Jeff Muizelaar 2020-06-30 14:52:27 -04:00
  • 1dfcb1d64a .github: lint advisories after assigning ID (#324) Tony Arcieri 2020-06-30 11:50:26 -07:00
  • 9cd619f167 make memoffset advisory informational (#317) Ralf Jung 2020-06-30 20:49:45 +02:00
  • 46c23f6c94 Assign RUSTSEC IDs (#323) github-actions[bot] 2020-06-30 10:27:13 -07:00
  • de07a7d207 Add tokio-rustls DoS advisory (#304) quininer 2020-06-30 14:01:58 +08:00
  • 48c8653408 Attempt to fix failing assign-ids task (#322) Alex Gaynor 2020-06-29 18:17:17 -04:00
  • 418954a939 Create github action to assign RUSTSEC ids (#311) Alex Gaynor 2020-06-29 18:07:56 -04:00
  • 45495b767e .github: bump rustsec-admin cache key (#321) Tony Arcieri 2020-06-29 11:17:28 -07:00
  • 8149410e8d Fix toml format error Yechan Bae 2020-06-29 01:40:06 -04:00
  • 7c96397ea1 Security advisory for AtheMathmo/rulinalg#201 Yechan Bae 2020-06-28 01:48:42 -04:00
  • 226a6d6dad Security advisory for SergioBenitez/Rocket#1312 Yechan Bae 2020-06-28 01:09:32 -04:00
  • f81972e8c4 Informational advisory for rust-lang-nursery/failure#336 Yechan Bae 2020-06-27 20:22:59 -04:00
  • ae22eb47d2 CONTRIBUTING: mention soundness issues (#314) Ralf Jung 2020-06-22 15:41:01 +02:00
  • 5049594b75 Add unmaintained crate advisory for block-cipher-trait (RUSTSEC-2020-0018) (#310) Tony Arcieri 2020-06-10 11:22:55 -07:00
  • 8587ec259a Assign RUSTSEC-2020-0017 to internment (#309) Tony Arcieri 2020-06-07 08:19:36 -07:00
  • 0f5a2dc239 Add advisory for internment (#306) Jeremy Fitzhardinge 2020-06-07 07:55:58 -07:00
  • efef3b953e Merge pull request #303 from RustSec/RUSTSEC-2018-0017 Tony Arcieri 2020-05-17 09:33:29 -07:00
  • 7d4ce9ae4f Assign RUSTSEC-2018-0017 to tempdir Tony Arcieri 2020-05-17 08:58:19 -07:00
  • 4853671ffa Merge pull request #295 from oherrala/tempdir Tony Arcieri 2020-05-17 08:54:35 -07:00
  • 5e13e75907 Merge pull request #301 from RustSec/RUSTSEC-2020-0016 Tony Arcieri 2020-05-17 08:53:47 -07:00
  • 1639be6561 Assign RUSTSEC-2020-0016 to net2 Tony Arcieri 2020-05-17 08:52:19 -07:00
  • a855755aa7 Merge pull request #296 from oherrala/net2 Tony Arcieri 2020-05-17 08:50:59 -07:00
  • a3c68605c7 net2 crate has been deprecated; use socket2 instead Ossi Herrala 2020-05-13 10:45:41 +03:00
  • 25f622bacf tempdir crate has been deprecated since 2018-02-13. Ossi Herrala 2020-05-13 10:18:39 +03:00
  • b1d3a5e73f Advisory for rio Jakub Kądziołka 2020-05-12 19:04:44 +02:00
  • 4565a921dd Merge pull request #286 from RustSec/RUSTSEC-2020-0015 Tony Arcieri 2020-05-04 16:46:31 -07:00
  • e44e26f397 Assign RUSTSEC-2020-0015 to openssl-src Tony Arcieri 2020-05-04 16:39:42 -07:00
  • f2feb205c6 Merge pull request #277 from lzutao/cve-openssl Tony Arcieri 2020-05-04 16:38:10 -07:00
  • e4ac8b16e7 Merge pull request #283 from Veetaha/patch-1 Tony Arcieri 2020-05-02 11:59:16 -07:00
  • b0bc62bdd5 Add cargo-deny to the list RustSec clients Veetaha 2020-05-02 20:27:32 +03:00
  • aa789b9cbd Merge pull request #280 from Manishearth/obsolete Tony Arcieri 2020-04-26 07:06:32 -07:00
  • 2b2b57668d RUSTSEC-2020-0011: make obsolete Manish Goregaokar 2020-04-25 19:40:04 -07:00
  • 03f59c6a56 Merge pull request #279 from CAD97/patch-1 Tony Arcieri 2020-04-25 12:13:38 -07:00
  • c63704f56b RUSTSEC-2020-0011: make wording more objective Christopher Durham 2020-04-25 15:10:50 -04:00
  • 0416e6aea7 Merge pull request #278 from RustSec/RUSTSEC-2020-0011/mark-as-informational Tony Arcieri 2020-04-25 12:02:52 -07:00
  • 63ca3a7793 RUSTSEC-2020-0011: mark as informational Tony Arcieri 2020-04-25 12:00:31 -07:00
  • cff4f820ac warn about CVE-2020-1967 Lzu Tao 2020-04-25 15:38:14 +00:00
  • eb2618ee1e Merge pull request #274 from RustSec/RUSTSEC-2020-0014 Tony Arcieri 2020-04-24 12:42:08 -07:00
  • 183f65dfd1 Assign RUSTSEC-2020-0014 to rusqlite Tony Arcieri 2020-04-24 12:40:14 -07:00
  • dea12f0602 Merge pull request #267 from thomcc/rusqlite Tony Arcieri 2020-04-24 12:39:27 -07:00
  • 185c7d1c1d Merge pull request #273 from RustSec/RUSTSEC-2020-0013 Tony Arcieri 2020-04-24 12:38:34 -07:00
  • 2d87929fc8 Assign RUSTSEC-2020-0013 to fake-static Tony Arcieri 2020-04-24 12:37:27 -07:00
  • 79a4b2fe7f Merge pull request #270 from eduardosm/fake-static Tony Arcieri 2020-04-24 12:36:49 -07:00
  • 54532e80c5 Merge pull request #272 from RustSec/RUSTSEC-2020-0012 Tony Arcieri 2020-04-24 12:36:30 -07:00
  • a4b88992e9 Assign RUSTSEC-2020-0012 to os_str_bytes Tony Arcieri 2020-04-24 12:35:29 -07:00
  • e64a5618c6 Merge pull request #269 from eduardosm/os_str_bytes Tony Arcieri 2020-04-24 12:34:37 -07:00
  • 1d48ab2e21 Merge pull request #271 from RustSec/RUSTSEC-2020-0011 Tony Arcieri 2020-04-24 12:33:37 -07:00
  • 2a0ed62cd1 Assign RUSTSEC-2020-0011 to plutonium Tony Arcieri 2020-04-24 12:28:47 -07:00
  • a40b1c5192 Merge pull request #268 from najamelan/plutonium Tony Arcieri 2020-04-24 12:26:57 -07:00
  • 6e85444c98 Add advisory for fake-static Eduardo Sánchez Muñoz 2020-04-24 00:51:46 +02:00
  • ab1840c2be Try an empty array for patched versions. Naja Melan 2020-04-24 06:05:59 +00:00
  • 16a2f4c592 Add advisory for os_str_bytes Eduardo Sánchez Muñoz 2020-04-24 00:23:27 +02:00
  • b761cd7428 Advisory for plutonium. Naja Melan 2020-04-23 23:26:08 +02:00
  • f8c59e28af Add advisory for rusqlite Thom Chiovoloni 2020-04-23 10:21:55 -07:00
  • aecc04c1f1 Merge pull request #266 from RustSec/RUSTSEC-2017-0007 Tony Arcieri 2020-04-16 17:26:49 -07:00
  • 7a2a72d069 Assign RUSTSEC-2017-0007 to lz4-compress Tony Arcieri 2020-04-16 17:17:05 -07:00
  • e9d8ac2d54 Merge pull request #264 from RustSec/unmaintained-lz4-compress Tony Arcieri 2020-04-16 17:15:55 -07:00
  • 6282ddf273 change advisory number to pass the linter Sergey "Shnatsel" Davidoff 2020-04-17 02:07:56 +02:00
  • bbcceb735f Mark lz4-compress as unmaintained Sergey "Shnatsel" Davidoff 2020-04-17 02:04:58 +02:00
  • 0004ee40af Merge pull request #263 from RustSec/RUSTSEC-2020-0010 Tony Arcieri 2020-04-16 09:01:01 -07:00
  • c427489358 Assign RUSTSEC-2020-0010 to tiberius Tony Arcieri 2020-04-16 08:59:42 -07:00
  • 110e83d354 Merge pull request #262 from RustSec/tiberius-unmaintained Tony Arcieri 2020-04-16 08:58:38 -07:00
  • cce1d47240 Add tiberius unmaintained advisory Tony Arcieri 2020-04-16 08:46:03 -07:00
  • 41dd03a2a8 Merge pull request #260 from RustSec/RUSTSEC-2020-0009 Tony Arcieri 2020-04-14 07:51:40 -07:00
  • 577308d91b Assign RUSTSEC-2020-0009 to flatbuffers Tony Arcieri 2020-04-14 07:48:53 -07:00
  • 893cf52c6c Merge pull request #259 from eduardosm/flatbuffers Tony Arcieri 2020-04-14 07:39:49 -07:00
  • 4399b9e310 Improve advisory for flatbuffers. Eduardo Sánchez Muñoz 2020-04-11 16:05:57 +02:00
  • cbeef93cf0 Add advisory for flatbuffers Eduardo Sánchez Muñoz 2020-04-11 13:25:30 +02:00
  • eaa3243b39 Merge pull request #258 from Pavlov123/master Tony Arcieri 2020-04-01 08:00:09 -07:00
  • c22f80eb55 Add unaffected field to RUSTSEC-2020-0008. Pavlos Poulakis 2020-04-01 13:28:48 +01:00
  • ffac5aa5f2 Merge pull request #257 from hawkw/patch-1 Tony Arcieri 2020-03-31 12:14:37 -07:00
  • 9889ed0831 Fix patched version for RUSTSEC-2020-0008 Eliza Weisman 2020-03-31 10:41:53 -07:00
  • 35d4b225d4 Merge pull request #256 from RustSec/RUSTSEC-2020-0008 Tony Arcieri 2020-03-31 10:09:02 -07:00
  • 6053e3a05f Assign RUSTSEC-2020-0008 to hyper Tony Arcieri 2020-03-31 10:07:02 -07:00
  • 66112b38a2 Merge pull request #255 from DemiMarie-parity/smuggling Tony Arcieri 2020-03-31 10:05:32 -07:00
  • 91eed85346 Note that another vulnerability is needed for RCE Demi M. Obenour 2020-03-30 18:57:51 -04:00
  • 8b6786f78c Merge branch 'master' into smuggling Demi M. Obenour 2020-03-30 18:38:47 -04:00
  • 81193d1dba Merge pull request #254 from RustSec/RUSTSEC-2020-0007 Tony Arcieri 2020-03-30 12:48:39 -07:00
  • 4de36fe70a Assign RUSTSEC-2020-0007 to bitvec Tony Arcieri 2020-03-30 12:45:14 -07:00
  • f37a7bf90a Merge pull request #253 from myrrlyn/master Tony Arcieri 2020-03-30 11:02:11 -07:00
  • 70389f6a25 Report memory management error in bitvec Alexander Payne 2020-03-27 16:10:15 -06:00
  • de905c8bfe Merge pull request #252 from RustSec/RUSTSEC-2020-0006 Tony Arcieri 2020-03-24 14:56:30 -07:00
  • ab9cad4eba Assign RUSTSEC-2020-0006 to bumpalo Tony Arcieri 2020-03-24 14:21:56 -07:00
  • a6d2cc87a2 Merge pull request #251 from fitzgen/patch-1 Tony Arcieri 2020-03-24 14:14:50 -07:00
  • 2a32306fa8 bumpalo: Report memory exposure bug in realloc Nick Fitzgerald 2020-03-24 14:12:17 -07:00
  • ae3627d1a9 Merge pull request #250 from djc/template-cvss Tony Arcieri 2020-03-24 07:40:04 -07:00
  • 3c71342be3 Mention CVSS field in template (see #248) Dirkjan Ochtman 2020-03-24 15:27:18 +01:00
  • e00d8ad965 Merge pull request #249 from RustSec/RUSTSEC-2020-0005 Tony Arcieri 2020-03-23 09:33:34 -07:00
  • da46c54637 Assign RUSTSEC-2020-0005 to cbox Tony Arcieri 2020-03-23 09:25:44 -07:00
  • 9d4cdd5ebd Merge pull request #246 from eduardosm/cbox Tony Arcieri 2020-03-23 09:13:32 -07:00