mirror of
https://github.com/rustsec/advisory-db.git
synced 2025-12-27 01:54:07 -05:00
Remove range overlaps, fix some range specifications (#930)
* Drop some clearly redundant bounds * Fix RUSTSEC-2020-0091 - the version specification was incorrect, marking 1.0.0 as fixed while in reality it was not * Fix RUSTSEC-2018-0004: presumably any updates to 0.3.x series would also get the fix, it would not be isolated to 0.3.2 * Fix incorrectly defined, overlapping ranges in RUSTSEC-2020-0080 and RUSTSEC-2019-0035
This commit is contained in:
committed by
GitHub
parent
3e51834f36
commit
40afced5fb
@@ -9,7 +9,7 @@ keywords = ["dangling reference"]
|
||||
aliases = ["CVE-2020-35711"]
|
||||
|
||||
[versions]
|
||||
patched = [">= 1.1.0", ">= 0.4.8"]
|
||||
patched = [">= 0.4.8, < 1.0.0-0", ">= 1.1.0"]
|
||||
unaffected = ["< 0.4.2"]
|
||||
|
||||
[affected]
|
||||
|
||||
@@ -8,7 +8,7 @@ keywords = ["uninitialized-memory"]
|
||||
url = "https://github.com/ruuda/claxon/commit/8f28ec275e412dd3af4f3cda460605512faf332c"
|
||||
|
||||
[versions]
|
||||
patched = ["=0.3.2", ">= 0.4.1"]
|
||||
patched = ["^0.3.2", ">= 0.4.1"]
|
||||
```
|
||||
|
||||
# Malicious input could cause uninitialized memory to be exposed
|
||||
|
||||
@@ -9,7 +9,7 @@ keywords = ["miscompile", "sandbox", "wasm"]
|
||||
aliases = ["CVE-2021-32629"]
|
||||
|
||||
[versions]
|
||||
patched = [">= 0.73.1", ">= 0.74"]
|
||||
patched = [">= 0.73.1"]
|
||||
|
||||
[affected]
|
||||
arch = ["x86"]
|
||||
|
||||
@@ -9,7 +9,7 @@ keywords = ["memory", "layout", "cast"]
|
||||
informational = "unsound"
|
||||
|
||||
[versions]
|
||||
patched = [">= 0.2.2", ">= 0.3.6"]
|
||||
patched = ["^ 0.2.2", ">= 0.3.6"]
|
||||
```
|
||||
|
||||
# `miow` invalidly assumes the memory layout of std::net::SocketAddr
|
||||
|
||||
@@ -12,7 +12,7 @@ url = "https://github.com/rust-random/rand/blob/master/rand_core/CHANGELOG.md#05
|
||||
"rand_core::BlockRng::next_u64" = ["< 0.4.2"]
|
||||
|
||||
[versions]
|
||||
patched = [">= 0.3.1", ">= 0.4.2"]
|
||||
patched = ["^ 0.3.1", ">= 0.4.2"]
|
||||
```
|
||||
|
||||
# Unaligned memory access
|
||||
|
||||
@@ -7,7 +7,7 @@ date = "2018-10-09"
|
||||
keywords = ["stack-overflow", "crash"]
|
||||
|
||||
[versions]
|
||||
patched = ["^0.4.3", ">= 0.5.0-alpha.3"]
|
||||
patched = [">= 0.4.3"]
|
||||
```
|
||||
|
||||
# Stack overflow when parsing malicious DNS packet
|
||||
|
||||
Reference in New Issue
Block a user