Update aliases from GHSA OSV export (#1727)

This commit is contained in:
Alexis Mousset
2023-07-08 14:30:19 +02:00
committed by GitHub
parent 1f538e6f3b
commit c2b1e4cab4
6 changed files with 6 additions and 1 deletions

View File

@@ -7,6 +7,7 @@ url = "https://github.com/softprops/atty/issues/50"
references = ["https://github.com/softprops/atty/pull/51", "https://github.com/softprops/atty/issues/57"]
keywords = ["unaligned-read"]
informational = "unsound"
aliases = ["GHSA-g98v-hv3f-hcfr"]
[affected]
os = ["windows"]

View File

@@ -6,6 +6,7 @@ date = "2023-06-15"
informational = "unsound"
url = "https://github.com/buckyos/CYFS/issues/275"
keywords = ["alignment", "unsound"]
aliases = ["GHSA-g753-ghr7-q33w"]
[versions]
patched = []

View File

@@ -7,6 +7,7 @@ url = "https://github.com/Gilnaa/memoffset/issues/24"
informational = "unsound"
categories = ["memory-corruption"]
keywords = ["memoffset", "offset"]
aliases = ["GHSA-wfg4-322g-9vqv"]
[affected]
functions = { "memoffset::offset_of" = ["< 0.6.2"] }
[versions]

View File

@@ -6,7 +6,7 @@ date = "2020-11-07"
url = "https://github.com/deprecrated/net2-rs/issues/105"
keywords = ["memory", "layout", "cast"]
informational = "unsound"
aliases = ["CVE-2020-35919", "CVE-2020-35920", "GHSA-458v-4hrf-g3m4"]
aliases = ["CVE-2020-35919", "CVE-2020-35920", "GHSA-458v-4hrf-g3m4", "GHSA-c79c-gwph-gqfm"]
cvss = "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
[versions]

View File

@@ -5,6 +5,7 @@ package = "openssl"
date = "2023-06-20"
url = "https://github.com/sfackler/rust-openssl/issues/1965"
categories = ["memory-exposure"]
aliases = ["GHSA-xcf7-rvmh-g6q4"]
[affected]
functions = { "openssl::x509::verify::X509VerifyParamRef::set_host" = ["< 0.10.55, >=0.10.0"] }

View File

@@ -5,6 +5,7 @@ package = "ouroboros"
date = "2023-06-11"
url = "https://github.com/joshua-maros/ouroboros/issues/88"
informational = "unsound"
aliases = ["GHSA-87mf-9wg6-ppf8"]
[versions]
patched = [">=0.16.0"]