Commit Graph

  • d99e1f9c94 Merge branch 'master' into cbox Tony Arcieri 2020-03-23 09:09:25 -07:00
  • 40077b6e77 Merge pull request #247 from rockstar/fix/adjust-patched-flatbuffers-version Tony Arcieri 2020-03-21 19:23:49 -07:00
  • ca7a01db12 fix: update patched version for 2019-0028 Paul Hummer 2020-03-19 15:42:02 -06:00
  • ce9b3be5b3 Add advisory for cbox Eduardo Sánchez Muñoz 2020-03-19 20:19:21 +01:00
  • 0d7868ccb9 Add hyper request smuggling vulnerability Demi M. Obenour 2020-03-19 11:41:39 -04:00
  • b7d6d4ae35 Merge pull request #245 from RustSec/cve-mapping Tony Arcieri 2020-03-18 09:34:35 -07:00
  • 7797133c67 Add CVE mapping Sergey "Shnatsel" Davidoff 2020-03-18 17:15:13 +01:00
  • f9beae30a9 Merge pull request #244 from RustSec/RUSTSEC-2016-0005/md5-is-legacy Tony Arcieri 2020-03-15 15:45:06 -07:00
  • 1880f0baf8 RUSTSEC-2016-0005: move md-5 crate to legacy algorithms Tony Arcieri 2020-03-15 15:43:02 -07:00
  • a6dfe7ff88 Merge pull request #243 from stroxler/patch-1 Tony Arcieri 2020-03-15 15:41:24 -07:00
  • b02ff94044 Add md5 to RustCrypto digest algorithms Steven Troxler 2020-03-14 14:32:08 -07:00
  • 88461fc18f Merge pull request #242 from RustSec/RUSTSEC-2019-0031/add-link-to-spinning-top Tony Arcieri 2020-03-13 09:54:03 -07:00
  • ee50344262 RUSTSEC-2019-0031: add link to spinning_top Tony Arcieri 2020-03-13 09:05:42 -07:00
  • 19196c2936 Merge pull request #238 from RustSec/migrate-rust-advisories-to-v2-format Tony Arcieri 2020-03-01 12:11:53 -08:00
  • f0ee46e990 Migrate rust/ advisories to V2 format Tony Arcieri 2020-03-01 11:28:26 -08:00
  • 5165b5f215 Merge pull request #239 from RustSec/fix-rustsec-admin-caching Tony Arcieri 2020-03-01 12:10:36 -08:00
  • ce7810963c .github: fix rustsec-admin install caching Tony Arcieri 2020-03-01 12:08:19 -08:00
  • 35fe84ed86 Merge pull request #237 from RustSec/cache-rustsec-admin-install Tony Arcieri 2020-03-01 11:11:15 -08:00
  • 38626513a9 .github: cache installation of rustsec-admin Tony Arcieri 2020-03-01 11:03:23 -08:00
  • 3d7688c538 Merge pull request #236 from RustSec/migrate-to-v2-format Tony Arcieri 2020-03-01 10:57:52 -08:00
  • 64c17acfe3 Migrate all advisories to V2 format (closes #228) Tony Arcieri 2020-03-01 10:42:21 -08:00
  • c54e93a581 Merge pull request #232 from RustSec/fix-linking-errors Tony Arcieri 2020-01-27 08:02:27 -08:00
  • df7657d332 Fix broken/malformatted outbound links Tony Arcieri 2020-01-27 07:52:31 -08:00
  • a6d99fb52e Merge pull request #231 from RustSec/RUSTSEC-2020-0004 Tony Arcieri 2020-01-27 07:30:39 -08:00
  • d8e872fd93 Assign RUSTSEC-2020-0004 to lucet-runtime-internals Tony Arcieri 2020-01-27 07:19:15 -08:00
  • 723abd4d2b Merge pull request #229 from jfoote/master Tony Arcieri 2020-01-27 07:18:20 -08:00
  • 81d10a945b Merge pull request #230 from RustSec/RUSTSEC-2020-0003 Tony Arcieri 2020-01-27 07:17:37 -08:00
  • 2b82281e54 Assign RUSTSEC-2020-0003 (informational) to rust_sodium Tony Arcieri 2020-01-27 07:09:23 -08:00
  • 5d16b10103 Merge pull request #225 from S-Coyle/rust_sodium Tony Arcieri 2020-01-27 07:06:13 -08:00
  • e5eeccda02 Merge branch 'master' into rust_sodium Tony Arcieri 2020-01-27 06:44:52 -08:00
  • 0271003e2e Update crates/lucet-runtime-internals/RUSTSEC-0000-0000.toml Jonathan Foote 2020-01-24 15:36:06 -05:00
  • 3f1f71de9b Update crates/lucet-runtime-internals/RUSTSEC-0000-0000.toml Jonathan Foote 2020-01-24 15:35:58 -05:00
  • f8ff9cfc6f Add lucet-runtime-internals sigstack allocation vuln advisory Jonathan Foote 2020-01-24 15:27:56 -05:00
  • b300fa84d7 Add unmaintained crate informational advisory: rust_sodium Stephen Coyle 2020-01-20 12:03:06 +00:00
  • b88eb18c3b Merge pull request #227 from RustSec/RUSTSEC-2018-0016 Tony Arcieri 2020-01-20 07:18:00 -08:00
  • 17e82e13d6 Assign RUSTSEC-2018-0016 to quickersort Tony Arcieri 2020-01-20 06:40:27 -08:00
  • e78d311ee1 Merge pull request #210 from EmbarkStudios/quickersort Tony Arcieri 2020-01-20 06:37:58 -08:00
  • 9fb65308a6 Merge pull request #224 from RustSec/RUSTSEC-2016-0005/add-note-about-rust-crypto-crate-vs-org Tony Arcieri 2020-01-19 11:37:20 -08:00
  • e30a06a6b2 RUSTSEC-2016-0005: add note about rust-crypto vs RustCrypto Tony Arcieri 2020-01-19 11:01:43 -08:00
  • 8b0725132b Fix typo Johan Andersson 2020-01-17 22:17:06 +01:00
  • 3aa5df1bbc Merge pull request #223 from RustSec/RUSTSEC-2020-0002 Tony Arcieri 2020-01-16 13:50:07 -08:00
  • a5b6099b9d Assign RUSTSEC-2020-0002 to prost Tony Arcieri 2020-01-16 12:52:00 -08:00
  • 35c829803e Merge pull request #222 from dbrgn/prost-stackoverflow Tony Arcieri 2020-01-16 12:50:53 -08:00
  • 7a0d254bbe fixup! Add advisory for prost stack overflow Danilo Bargen 2020-01-16 20:23:41 +01:00
  • 57f553ee45 Add advisory for prost stack overflow Danilo Bargen 2020-01-16 20:22:21 +01:00
  • 4d051434f0 Merge pull request #221 from roy-work/roy/fix-http-affected-ranges Tony Arcieri 2020-01-09 14:56:31 -05:00
  • 200651cff2 Correct affected version range on RUSTSEC-2019-003[34] to patched at 0.1.20 Roy Wellington Ⅳ 2020-01-09 12:20:27 -05:00
  • 289948245e Merge pull request #220 from RustSec/RUSTSEC-2019-0034 Tony Arcieri 2020-01-09 12:09:54 -05:00
  • 526892a193 Assign RUSTSEC-2019-0034 to http Tony Arcieri 2020-01-09 11:24:52 -05:00
  • 2aad27e243 Merge pull request #218 from Qwaz/http2 Tony Arcieri 2020-01-09 11:20:19 -05:00
  • 52e0b4e186 Merge branch 'master' into http2 Tony Arcieri 2020-01-09 10:49:26 -05:00
  • f35bd92631 Merge pull request #219 from RustSec/RUSTSEC-2019-0033 Tony Arcieri 2020-01-09 10:49:07 -05:00
  • 0e59ecb72d Assign RUSTSEC-2019-0033 to http Tony Arcieri 2020-01-09 10:37:55 -05:00
  • 8c9c29bbb7 Merge pull request #217 from Qwaz/http1 Tony Arcieri 2020-01-09 10:27:46 -05:00
  • ba2df66b30 hyperium/http/issues/354,355 Yechan Bae 2020-01-09 00:42:56 -05:00
  • 36b8de692c hyperium/http/issues/352 Yechan Bae 2020-01-09 00:33:32 -05:00
  • 891a872b73 Merge pull request #216 from RustSec/RUSTSEC-2020-0001 Tony Arcieri 2020-01-07 13:17:58 -05:00
  • e043405eab Assign RUSTSEC-2020-0001 to trust-dns-server Tony Arcieri 2020-01-07 12:57:18 -05:00
  • 628f821b2d Merge pull request #215 from bluejekyll/master Tony Arcieri 2020-01-07 12:55:49 -05:00
  • 1af3b6eea6 trust-dns-server additions processing overflows stack Benjamin Fry 2020-01-06 13:12:19 -08:00
  • 4a7d05d5d8 Merge pull request #214 from RustSec/readme/bump-maintained-date Tony Arcieri 2020-01-03 14:06:13 -05:00
  • b1c200fb52 README.md: Bump maintained date to Q1 2020 Tony Arcieri 2020-01-03 13:49:23 -05:00
  • 5ca94a4b4a Merge pull request #213 from RustSec/RUSTSEC-2019-0031/add-conquer-once Tony Arcieri 2020-01-03 13:48:13 -05:00
  • 694f07e241 RUSTSEC-2019-0031: add conquer-once as an alternative to spin Tony Arcieri 2020-01-03 13:32:33 -05:00
  • d96db2b3d6 Merge pull request #211 from basvandijk/RUSTSEC-2019-0023-string-interner-0.6.4 Tony Arcieri 2019-12-21 08:30:20 -08:00
  • 158c986aa4 string-interner-0.6.4 also fixes RUSTSEC-2019-0023 Bas van Dijk 2019-12-21 11:43:05 +01:00
  • 6da6344b00 Add advisory for deprecated/unmaintained quickersort Johan Andersson 2019-12-19 00:24:39 +01:00
  • 7bc1753de3 Merge pull request #209 from RustSec/RUSTSEC-2019-0032 Tony Arcieri 2019-12-17 07:43:10 -08:00
  • c2c2e8e1a7 Assign RUSTSEC-2019-0032 to crust Tony Arcieri 2019-12-17 07:32:36 -08:00
  • 63f1b5f0cd Merge pull request #208 from RustSec/RUSTSEC-2019-0031/spin Tony Arcieri 2019-12-17 07:08:45 -08:00
  • 91b9e060e2 Assign RUSTSEC-2019-0031 to spin Tony Arcieri 2019-12-17 06:42:04 -08:00
  • 159a7a3b55 Merge pull request #204 from simlay/crust-archived Tony Arcieri 2019-11-21 16:38:17 -08:00
  • 366505b01b Added RUSTSEC advisory for crust as an unmaintained. Sebastian Imlay 2019-11-21 15:36:34 -08:00
  • 6957957ea1 Merge pull request #203 from omarabid/patch-1 Tony Arcieri 2019-11-13 06:36:44 +01:00
  • 7f4c2e1863 fix typo in Readme Abid Omar 2019-11-11 21:04:03 +01:00
  • f9cd955852 Merge pull request #202 from RustSec/RUSTSEC-2019-0030 Tony Arcieri 2019-11-07 08:33:52 -08:00
  • c762d41313 Assign RUSTSEC-2019-0030 to streebog Tony Arcieri 2019-11-07 08:04:32 -08:00
  • cd6c47bc90 Merge pull request #201 from newpavlov/streebog1 Tony Arcieri 2019-11-06 11:41:53 -08:00
  • 34eb710de5 fix description newpavlov 2019-11-06 19:49:57 +03:00
  • 7786157156 add an advisory for streebog bug newpavlov 2019-11-06 19:47:35 +03:00
  • 61f0800fb0 Merge pull request #200 from brycx/orion-alternative Tony Arcieri 2019-11-04 17:16:17 -08:00
  • 9a3a5743c0 No IETF on XChaCha20 variant brycx 2019-11-04 19:53:43 +01:00
  • c8f2bccd72 rust-crypto: Add orion as alternative brycx 2019-11-04 15:49:50 +01:00
  • edca2c5ae0 Merge pull request #199 from RustSec/chacha20/counter-overflow Tony Arcieri 2019-10-23 11:07:55 -07:00
  • ab01fe3e28 Assign RUSTSEC-2019-0029 to chacha20 Tony Arcieri 2019-10-23 10:56:18 -07:00
  • 0f1e1885db chacha20: Add counter overflow advisory Tony Arcieri 2019-10-23 10:36:53 -07:00
  • b810ef0f6b Merge pull request #197 from nagisa/flatbuffers Tony Arcieri 2019-10-23 09:25:10 -07:00
  • d520ed489c Assign RUSTSEC-2019-0028 to flatbuffers Tony Arcieri 2019-10-23 09:11:16 -07:00
  • 2a867650cb Add a flatbuffers unsound code advisory Simonas Kazlauskas 2019-10-20 17:59:05 +03:00
  • 21ec94a22f Merge pull request #196 from kpp/patch-1 Tony Arcieri 2019-10-19 20:35:02 -07:00
  • 73c772d878 Update RUSTSEC-2019-0026.toml Roman Proskuryakov 2019-10-20 02:04:21 +03:00
  • d53649551b Merge pull request #195 from RustSec/RUSTSEC-2019-0027 Tony Arcieri 2019-10-14 09:00:23 -07:00
  • 783394f059 Assign RUSTSEC-2019-0027 to libsecp256k1 Tony Arcieri 2019-10-14 08:32:15 -07:00
  • 2ea335249f Merge pull request #194 from s3krit/libsecp256k1-timing Tony Arcieri 2019-10-14 08:22:15 -07:00
  • 0af6c80758 Add libsecp256k1 advisory Martin Pugh 2019-10-14 14:04:02 +01:00
  • 8b3a5661db Merge pull request #193 from RustSec/RUSTSEC-2019-0026 Tony Arcieri 2019-10-11 12:09:13 -07:00
  • 38a7158626 Assign RUSTSEC-2019-0026 to sodiumoxide Tony Arcieri 2019-10-11 11:43:47 -07:00
  • 4ee77db244 Merge pull request #192 from kpp/master Tony Arcieri 2019-10-11 11:42:13 -07:00
  • fd955ac4a2 PartialEq implementation for sodiumoxide::crypto::generichash::Digest has compared itself to itself Roman Proskuryakov 2019-10-11 20:08:42 +03:00
  • ba8504f073 Merge pull request #191 from RustSec/RUSTSEC-2017-0006/add-patched-versions Tony Arcieri 2019-10-11 09:23:18 -07:00