From c2b1e4cab49a99963690e5c96a733e867d2fea5b Mon Sep 17 00:00:00 2001 From: Alexis Mousset Date: Sat, 8 Jul 2023 14:30:19 +0200 Subject: [PATCH] Update aliases from GHSA OSV export (#1727) --- crates/atty/RUSTSEC-2021-0145.md | 1 + crates/cyfs-base/RUSTSEC-2023-0046.md | 1 + crates/memoffset/RUSTSEC-2023-0045.md | 1 + crates/net2/RUSTSEC-2020-0078.md | 2 +- crates/openssl/RUSTSEC-2023-0044.md | 1 + crates/ouroboros/RUSTSEC-2023-0042.md | 1 + 6 files changed, 6 insertions(+), 1 deletion(-) diff --git a/crates/atty/RUSTSEC-2021-0145.md b/crates/atty/RUSTSEC-2021-0145.md index 15f3b6f4..ece6c8d0 100644 --- a/crates/atty/RUSTSEC-2021-0145.md +++ b/crates/atty/RUSTSEC-2021-0145.md @@ -7,6 +7,7 @@ url = "https://github.com/softprops/atty/issues/50" references = ["https://github.com/softprops/atty/pull/51", "https://github.com/softprops/atty/issues/57"] keywords = ["unaligned-read"] informational = "unsound" +aliases = ["GHSA-g98v-hv3f-hcfr"] [affected] os = ["windows"] diff --git a/crates/cyfs-base/RUSTSEC-2023-0046.md b/crates/cyfs-base/RUSTSEC-2023-0046.md index d3d294b4..9e3b4b54 100644 --- a/crates/cyfs-base/RUSTSEC-2023-0046.md +++ b/crates/cyfs-base/RUSTSEC-2023-0046.md @@ -6,6 +6,7 @@ date = "2023-06-15" informational = "unsound" url = "https://github.com/buckyos/CYFS/issues/275" keywords = ["alignment", "unsound"] +aliases = ["GHSA-g753-ghr7-q33w"] [versions] patched = [] diff --git a/crates/memoffset/RUSTSEC-2023-0045.md b/crates/memoffset/RUSTSEC-2023-0045.md index bbd3e829..5f16dfcd 100644 --- a/crates/memoffset/RUSTSEC-2023-0045.md +++ b/crates/memoffset/RUSTSEC-2023-0045.md @@ -7,6 +7,7 @@ url = "https://github.com/Gilnaa/memoffset/issues/24" informational = "unsound" categories = ["memory-corruption"] keywords = ["memoffset", "offset"] +aliases = ["GHSA-wfg4-322g-9vqv"] [affected] functions = { "memoffset::offset_of" = ["< 0.6.2"] } [versions] diff --git a/crates/net2/RUSTSEC-2020-0078.md b/crates/net2/RUSTSEC-2020-0078.md index 4f0eabde..8c8cf7fb 100644 --- a/crates/net2/RUSTSEC-2020-0078.md +++ b/crates/net2/RUSTSEC-2020-0078.md @@ -6,7 +6,7 @@ date = "2020-11-07" url = "https://github.com/deprecrated/net2-rs/issues/105" keywords = ["memory", "layout", "cast"] informational = "unsound" -aliases = ["CVE-2020-35919", "CVE-2020-35920", "GHSA-458v-4hrf-g3m4"] +aliases = ["CVE-2020-35919", "CVE-2020-35920", "GHSA-458v-4hrf-g3m4", "GHSA-c79c-gwph-gqfm"] cvss = "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" [versions] diff --git a/crates/openssl/RUSTSEC-2023-0044.md b/crates/openssl/RUSTSEC-2023-0044.md index 5a1f4b32..8e538ed9 100644 --- a/crates/openssl/RUSTSEC-2023-0044.md +++ b/crates/openssl/RUSTSEC-2023-0044.md @@ -5,6 +5,7 @@ package = "openssl" date = "2023-06-20" url = "https://github.com/sfackler/rust-openssl/issues/1965" categories = ["memory-exposure"] +aliases = ["GHSA-xcf7-rvmh-g6q4"] [affected] functions = { "openssl::x509::verify::X509VerifyParamRef::set_host" = ["< 0.10.55, >=0.10.0"] } diff --git a/crates/ouroboros/RUSTSEC-2023-0042.md b/crates/ouroboros/RUSTSEC-2023-0042.md index 1205ca81..52178ee5 100644 --- a/crates/ouroboros/RUSTSEC-2023-0042.md +++ b/crates/ouroboros/RUSTSEC-2023-0042.md @@ -5,6 +5,7 @@ package = "ouroboros" date = "2023-06-11" url = "https://github.com/joshua-maros/ouroboros/issues/88" informational = "unsound" +aliases = ["GHSA-87mf-9wg6-ppf8"] [versions] patched = [">=0.16.0"]