build: niv advisory-db: update 1db76028 -> d5c7ae1c#1831
Merged
mergify[bot] merged 1 commit intomasterfrom Sep 22, 2021
Merged
Conversation
## Changelog for advisory-db: Branch: main Commits: [rustsec/advisory-db@1db76028...d5c7ae1c](rustsec/advisory-db@1db7602...d5c7ae1) * [`a81783c6`](rustsec/advisory-db@a81783c) added CVE-2021-29922 ([RustSec/advisory-db#971](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/971)) * [`0148dead`](rustsec/advisory-db@0148dea) Add advisory for hyper Content-Length header parsing ([RustSec/advisory-db#967](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/967)) * [`255194ae`](rustsec/advisory-db@255194a) Assigned RUSTSEC-2021-0078 to hyper ([RustSec/advisory-db#972](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/972)) * [`3a5de9c7`](rustsec/advisory-db@3a5de9c) Add advisory for hyper Transfer-Encoding header parsing ([RustSec/advisory-db#968](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/968)) * [`82ce1aa7`](rustsec/advisory-db@82ce1aa) Assigned RUSTSEC-2021-0079 to hyper ([RustSec/advisory-db#973](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/973)) * [`158cd653`](rustsec/advisory-db@158cd65) Add directory traversal for tar ([RustSec/advisory-db#965](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/965)) * [`ce76490f`](rustsec/advisory-db@ce76490) Assigned RUSTSEC-2021-0080 to tar ([RustSec/advisory-db#974](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/974)) * [`541c537a`](rustsec/advisory-db@541c537) added specific affected functions to CVE-2021-29922 ([RustSec/advisory-db#975](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/975)) * [`7a42cb7e`](rustsec/advisory-db@7a42cb7) add advisory for actix-http HRS ([RustSec/advisory-db#977](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/977)) * [`e6925972`](rustsec/advisory-db@e692597) Assigned RUSTSEC-2021-0081 to actix-http ([RustSec/advisory-db#978](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/978)) * [`01bad82d`](rustsec/advisory-db@01bad82) Add fix for RUSTSEC-2021-0080 ([RustSec/advisory-db#979](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/979)) * [`67da87fc`](rustsec/advisory-db@67da87f) Update RUSTSEC-2021-0080 [affected] version ([RustSec/advisory-db#980](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/980)) * [`e0fda3fe`](rustsec/advisory-db@e0fda3f) add CVE alias to RUSTSEC-2021-0081(actix-http) ([RustSec/advisory-db#983](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/983)) * [`f20b53ca`](rustsec/advisory-db@f20b53c) Patched release of reffers ([RustSec/advisory-db#984](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/984)) * [`01c59caf`](rustsec/advisory-db@01c59ca) Report vec-const as unsound ([RustSec/advisory-db#981](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/981)) * [`68d6f5af`](rustsec/advisory-db@68d6f5a) Assigned RUSTSEC-2021-0082 to vec-const ([RustSec/advisory-db#985](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/985)) * [`b4b68c19`](rustsec/advisory-db@b4b68c1) bite: Read on uninitialized memory ([RustSec/advisory-db#593](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/593)) * [`9c5df457`](rustsec/advisory-db@9c5df45) Assigned RUSTSEC-2020-0153 to bite ([RustSec/advisory-db#986](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/986)) * [`ef71611e`](rustsec/advisory-db@ef71611) Add advisory for potential memory corruption in derive-com-impl ([RustSec/advisory-db#649](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/649)) * [`7765af95`](rustsec/advisory-db@7765af9) Assigned RUSTSEC-2021-0083 to derive-com-impl ([RustSec/advisory-db#987](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/987)) * [`e9382c86`](rustsec/advisory-db@e9382c8) Fix typos in advisories ([RustSec/advisory-db#976](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/976)) * [`10843f83`](rustsec/advisory-db@10843f8) bronzedb-protocol: `Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`) ([RustSec/advisory-db#659](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/659)) * [`90399127`](rustsec/advisory-db@9039912) Assigned RUSTSEC-2021-0084 to bronzedb-protocol ([RustSec/advisory-db#988](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/988)) * [`9e4db05a`](rustsec/advisory-db@9e4db05) binjs_io: 'Read' on uninitialized memory may cause UB ([RustSec/advisory-db#660](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/660)) * [`383c6359`](rustsec/advisory-db@383c635) Assigned RUSTSEC-2021-0085 to binjs_io ([RustSec/advisory-db#989](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/989)) * [`c487b0ce`](rustsec/advisory-db@c487b0c) flumedb: Reading on uninitialized buffer may cause UB ( `read_entry()` ) ([RustSec/advisory-db#661](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/661)) * [`4a51eedb`](rustsec/advisory-db@4a51eed) Assigned RUSTSEC-2021-0086 to flumedb ([RustSec/advisory-db#990](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/990)) * [`72e61b6d`](rustsec/advisory-db@72e61b6) columnar: Reading on uninitialized buffer may cause UB ([RustSec/advisory-db#662](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/662)) * [`06d14ff7`](rustsec/advisory-db@06d14ff) Assigned RUSTSEC-2021-0087 to columnar ([RustSec/advisory-db#991](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/991)) * [`09e0afc3`](rustsec/advisory-db@09e0afc) buffoon: InputStream::read_exact : Reading into an uninitialized buffer may cause UB ([RustSec/advisory-db#663](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/663)) * [`03144b19`](rustsec/advisory-db@03144b1) Assigned RUSTSEC-2020-0154 to buffoon ([RustSec/advisory-db#992](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/992)) * [`25838dcf`](rustsec/advisory-db@25838dc) acc_reader: API Soundness issue in `fill_buf()` and `read_up_to()` ([RustSec/advisory-db#664](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/664)) * [`ec590b08`](rustsec/advisory-db@ec590b0) Assigned RUSTSEC-2020-0155 to acc_reader ([RustSec/advisory-db#993](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/993)) * [`2e4cdf36`](rustsec/advisory-db@2e4cdf3) csv-sniffer: reading on uninitialized memory may cause undefined behavior ([RustSec/advisory-db#666](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/666)) * [`e6e533ab`](rustsec/advisory-db@e6e533a) Assigned RUSTSEC-2021-0088 to csv-sniffer ([RustSec/advisory-db#994](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/994)) * [`7d12d952`](rustsec/advisory-db@7d12d95) raw-cpuid: Optional `Deserialize` implementations lacking validation ([RustSec/advisory-db#671](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/671)) * [`7bf56198`](rustsec/advisory-db@7bf5619) Assigned RUSTSEC-2021-0089 to raw-cpuid ([RustSec/advisory-db#995](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/995)) * [`690cf956`](rustsec/advisory-db@690cf95) ash: Reading on uninitialized memory may cause UB ( `util::read_spv()` ) ([RustSec/advisory-db#680](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/680)) * [`2645debe`](rustsec/advisory-db@2645deb) Assigned RUSTSEC-2021-0090 to ash ([RustSec/advisory-db#996](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/996)) * [`22325889`](rustsec/advisory-db@2232588) gfx-auxil: `Read` on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` ) ([RustSec/advisory-db#681](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/681)) * [`cf6f9d25`](rustsec/advisory-db@cf6f9d2) Assigned RUSTSEC-2021-0091 to gfx-auxil ([RustSec/advisory-db#997](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/997)) * [`460ac8be`](rustsec/advisory-db@460ac8b) Add advisory for uninitialized exposure in messagepack-rs ([RustSec/advisory-db#835](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/835)) * [`8d3e99a3`](rustsec/advisory-db@8d3e99a) Assigned RUSTSEC-2021-0092 to messagepack-rs ([RustSec/advisory-db#998](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/998)) * [`670b2887`](rustsec/advisory-db@670b288) Add advisory for data race in crossbeam-deque ([RustSec/advisory-db#970](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/970)) * [`14af874f`](rustsec/advisory-db@14af874) Assigned RUSTSEC-2021-0093 to crossbeam-deque ([RustSec/advisory-db#999](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/999)) * [`89842247`](rustsec/advisory-db@8984224) Add advisory for out-of-bounds read in rdiff ([RustSec/advisory-db#862](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/862)) * [`4b018059`](rustsec/advisory-db@4b01805) Assigned RUSTSEC-2021-0094 to rdiff ([RustSec/advisory-db#1000](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1000)) * [`59cdbf21`](rustsec/advisory-db@59cdbf2) mopa is technically unsound ([RustSec/advisory-db#927](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/927)) * [`b6a20c1b`](rustsec/advisory-db@b6a20c1) Assigned RUSTSEC-2021-0095 to mopa ([RustSec/advisory-db#1001](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1001)) * [`101d914e`](rustsec/advisory-db@101d914) RUSTSEC-2021-0089 has been patched in raw-cpuid 9.1.1 ([RustSec/advisory-db#1002](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1002)) * [`45f9665f`](rustsec/advisory-db@45f9665) Fix CVE alias CVE-2020-35920 ([RustSec/advisory-db#1003](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1003)) * [`d7112723`](rustsec/advisory-db@d711272) ash: RUSTSEC-2021-0090 has been patched in 0.33.1 ([RustSec/advisory-db#1004](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1004)) * [`2f117ce3`](rustsec/advisory-db@2f117ce) spirv_headers is deprecated ([RustSec/advisory-db#982](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/982)) * [`9f1d4c90`](rustsec/advisory-db@9f1d4c9) Assigned RUSTSEC-2021-0096 to spirv_headers ([RustSec/advisory-db#1005](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1005)) * [`100b12d9`](rustsec/advisory-db@100b12d) add cve-2021-3711 for openssl-src ([RustSec/advisory-db#1006](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1006)) * [`ceea3987`](rustsec/advisory-db@ceea398) Assigned RUSTSEC-2021-0097 to openssl-src ([RustSec/advisory-db#1008](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1008)) * [`10b6f1e3`](rustsec/advisory-db@10b6f1e) add cve-2021-3712 for openssl-src ([RustSec/advisory-db#1007](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1007)) * [`1be95342`](rustsec/advisory-db@1be9534) Assigned RUSTSEC-2021-0098 to openssl-src ([RustSec/advisory-db#1009](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1009)) * [`0f2bc2d6`](rustsec/advisory-db@0f2bc2d) Add unmaintained crate advisory for `cosmos_sdk` ([RustSec/advisory-db#1010](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1010)) * [`138fb157`](rustsec/advisory-db@138fb15) Assigned RUSTSEC-2021-0099 to cosmos_sdk ([RustSec/advisory-db#1011](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1011)) * [`4744ee62`](rustsec/advisory-db@4744ee6) Add sha2 v0.9.7 AVX2 bug ([RustSec/advisory-db#1012](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1012)) * [`3e31699c`](rustsec/advisory-db@3e31699) Assigned RUSTSEC-2021-0100 to sha2 ([RustSec/advisory-db#1013](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1013)) * [`27820b70`](rustsec/advisory-db@27820b7) Add rustsec advisory for GHSA-vc5p-j8vw-mc6x ([RustSec/advisory-db#1014](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1014)) * [`b59e06ec`](rustsec/advisory-db@b59e06e) Assigned RUSTSEC-2021-0101 to pleaser ([RustSec/advisory-db#1026](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1026)) * [`841ecbf1`](rustsec/advisory-db@841ecbf) Add rustsec advisory for GHSA-pp74-39w2-v4w9 ([RustSec/advisory-db#1016](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1016)) * [`9dbe2627`](rustsec/advisory-db@9dbe262) Assigned RUSTSEC-2021-0102 to pleaser ([RustSec/advisory-db#1027](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1027)) * [`9a81b244`](rustsec/advisory-db@9a81b24) Add rustsec advisory for GHSA-82hm-vh7g-hrh9 ([RustSec/advisory-db#1021](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1021)) * [`8e5d566e`](rustsec/advisory-db@8e5d566) Assigned RUSTSEC-2021-0103 to molecule ([RustSec/advisory-db#1028](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1028)) * [`95107000`](rustsec/advisory-db@9510700) Add rustsec advisory for GHSA-f3fg-5j9p-vchc ([RustSec/advisory-db#1020](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1020)) * [`4b4a4d8d`](rustsec/advisory-db@4b4a4d8) Assigned RUSTSEC-2021-0104 to pleaser ([RustSec/advisory-db#1029](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1029)) * [`e5b66bfe`](rustsec/advisory-db@e5b66bf) Add rustsec advisory for GHSA-7cqg-8449-rmfv ([RustSec/advisory-db#1022](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1022)) * [`71f18afd`](rustsec/advisory-db@71f18af) Assigned RUSTSEC-2020-0156 to libsecp256k1-rs ([RustSec/advisory-db#1030](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1030)) * [`fa5597ee`](rustsec/advisory-db@fa5597e) Add rustsec advisory for GHSA-5xg3-j2j6-rcx4 ([RustSec/advisory-db#1023](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1023)) * [`fe4e45e5`](rustsec/advisory-db@fe4e45e) Assigned RUSTSEC-2021-0105 to git-delta ([RustSec/advisory-db#1031](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1031)) * [`10fa105f`](rustsec/advisory-db@10fa105) Add rustsec advisory for GHSA-p24j-h477-76q3 ([RustSec/advisory-db#1017](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1017)) * [`ec858f80`](rustsec/advisory-db@ec858f8) Assigned RUSTSEC-2021-0106 to bat ([RustSec/advisory-db#1032](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1032)) * [`181cf280`](rustsec/advisory-db@181cf28) Add rustsec advisory for GHSA-v666-6w97-pcwm ([RustSec/advisory-db#1015](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1015)) * [`f969fe89`](rustsec/advisory-db@f969fe8) Add rustsec advisory for GHSA-mm4m-qg48-f7wc ([RustSec/advisory-db#1018](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1018)) * [`315a5c06`](rustsec/advisory-db@315a5c0) Assigned RUSTSEC-2020-0157 to vm-memory, RUSTSEC-2021-0107 to ckb ([RustSec/advisory-db#1033](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1033)) * [`ef8532be`](rustsec/advisory-db@ef8532b) Add rustsec advisory for GHSA-48vq-8jqv-gm6f ([RustSec/advisory-db#1024](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1024)) * [`50464643`](rustsec/advisory-db@5046464) Assigned RUSTSEC-2021-0108 to ckb ([RustSec/advisory-db#1034](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1034)) * [`b838a4c6`](rustsec/advisory-db@b838a4c) Add rustsec advisory for GHSA-45p7-c959-rgcm ([RustSec/advisory-db#1025](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1025)) * [`a665da67`](rustsec/advisory-db@a665da6) Add GHSA alias to RUSTSEC-2021-0102 * [`204c1ae2`](rustsec/advisory-db@204c1ae) add GHSA alias to RUSTSEC-2021-0101 ([RustSec/advisory-db#1036](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1036)) * [`8b677b0f`](rustsec/advisory-db@8b677b0) Assigned RUSTSEC-2021-0109 to ckb ([RustSec/advisory-db#1035](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1035)) * [`b99d8a13`](rustsec/advisory-db@b99d8a1) Add GHSA alias to RUSTSEC-2021-0104 ([RustSec/advisory-db#1038](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1038)) * [`464cc079`](rustsec/advisory-db@464cc07) Add GHSA alias to RUSTSEC-2020-0156 * [`2b1a5c55`](rustsec/advisory-db@2b1a5c5) Add GHSA alias to RUSTSEC-2021-0105 ([RustSec/advisory-db#1041](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1041)) * [`b5756edd`](rustsec/advisory-db@b5756ed) Add GHSA alias to RUSTSEC-2021-0103 ([RustSec/advisory-db#1040](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1040)) * [`d202965d`](rustsec/advisory-db@d202965) Add GHSA alias to RUSTSEC-2021-0106 ([RustSec/advisory-db#1039](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1039)) * [`6c092fec`](rustsec/advisory-db@6c092fe) Switch to rustsec-admin 0.5.2 (OSV 1.0) and branch `osv` ([RustSec/advisory-db#1042](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1042)) * [`ab0a8432`](rustsec/advisory-db@ab0a843) Mention OSV in readme ([RustSec/advisory-db#1043](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1043)) * [`3d742d44`](rustsec/advisory-db@3d742d4) Add recent Wasmtime CVEs ([RustSec/advisory-db#1046](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1046)) * [`26d56f76`](rustsec/advisory-db@26d56f7) Assigned RUSTSEC-2021-0110 to wasmtime ([RustSec/advisory-db#1047](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1047)) * [`057094d6`](rustsec/advisory-db@057094d) Add advisory for memory corruption in tremor-script < 0.11.6 ([RustSec/advisory-db#1045](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1045)) * [`9fead378`](rustsec/advisory-db@9fead37) Assigned RUSTSEC-2021-0111 to tremor-script ([RustSec/advisory-db#1048](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1048)) * [`bb15a55b`](rustsec/advisory-db@bb15a55) Add disappeared advisories ([RustSec/advisory-db#1049](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1049)) * [`d5c7ae1c`](rustsec/advisory-db@d5c7ae1) Assigned RUSTSEC-2021-0112 to tectonic_xdv, RUSTSEC-2021-0113 to metrics-util ([RustSec/advisory-db#1050](http://r.duckduckgo.com/l/?uddg=https://github.com/RustSec/advisory-db/issues/1050))
![mergify[bot]](https://avatars.githubusercontent.com/in/10562?s=60&v=4){kind=small}
mergify
bot
deleted the
update/advisory-db-1db7602857582a41c83cedf002f32c1cf905d39e
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changelog for advisory-db:
Branch: main
Commits: RustSec/advisory-db@1db76028...d5c7ae1c
a81783c6added CVE-2021-29922 (RustSec/advisory-db#971)0148deadAdd advisory for hyper Content-Length header parsing (RustSec/advisory-db#967)255194aeAssigned RUSTSEC-2021-0078 to hyper (RustSec/advisory-db#972)3a5de9c7Add advisory for hyper Transfer-Encoding header parsing (RustSec/advisory-db#968)82ce1aa7Assigned RUSTSEC-2021-0079 to hyper (RustSec/advisory-db#973)158cd653Add directory traversal for tar (RustSec/advisory-db#965)ce76490fAssigned RUSTSEC-2021-0080 to tar (RustSec/advisory-db#974)541c537aadded specific affected functions to CVE-2021-29922 (RustSec/advisory-db#975)7a42cb7eadd advisory for actix-http HRS (RustSec/advisory-db#977)e6925972Assigned RUSTSEC-2021-0081 to actix-http (RustSec/advisory-db#978)01bad82dAdd fix for RUSTSEC-2021-0080 (RustSec/advisory-db#979)67da87fcUpdate RUSTSEC-2021-0080 [affected] version (RustSec/advisory-db#980)e0fda3feadd CVE alias to RUSTSEC-2021-0081(actix-http) (RustSec/advisory-db#983)f20b53caPatched release of reffers (RustSec/advisory-db#984)01c59cafReport vec-const as unsound (RustSec/advisory-db#981)68d6f5afAssigned RUSTSEC-2021-0082 to vec-const (RustSec/advisory-db#985)b4b68c19bite: Read on uninitialized memory (RustSec/advisory-db#593)9c5df457Assigned RUSTSEC-2020-0153 to bite (RustSec/advisory-db#986)ef71611eAdd advisory for potential memory corruption in derive-com-impl (RustSec/advisory-db#649)7765af95Assigned RUSTSEC-2021-0083 to derive-com-impl (RustSec/advisory-db#987)e9382c86Fix typos in advisories (RustSec/advisory-db#976)10843f83bronzedb-protocol:Readon uninitialized buffer can cause UB (impl ofReadKVExt) (RustSec/advisory-db#659)90399127Assigned RUSTSEC-2021-0084 to bronzedb-protocol (RustSec/advisory-db#988)9e4db05abinjs_io: 'Read' on uninitialized memory may cause UB (RustSec/advisory-db#660)383c6359Assigned RUSTSEC-2021-0085 to binjs_io (RustSec/advisory-db#989)c487b0ceflumedb: Reading on uninitialized buffer may cause UB (read_entry()) (RustSec/advisory-db#661)4a51eedbAssigned RUSTSEC-2021-0086 to flumedb (RustSec/advisory-db#990)72e61b6dcolumnar: Reading on uninitialized buffer may cause UB (RustSec/advisory-db#662)06d14ff7Assigned RUSTSEC-2021-0087 to columnar (RustSec/advisory-db#991)09e0afc3buffoon: InputStream::read_exact : Reading into an uninitialized buffer may cause UB (RustSec/advisory-db#663)03144b19Assigned RUSTSEC-2020-0154 to buffoon (RustSec/advisory-db#992)25838dcfacc_reader: API Soundness issue infill_buf()andread_up_to()(RustSec/advisory-db#664)ec590b08Assigned RUSTSEC-2020-0155 to acc_reader (RustSec/advisory-db#993)2e4cdf36csv-sniffer: reading on uninitialized memory may cause undefined behavior (RustSec/advisory-db#666)e6e533abAssigned RUSTSEC-2021-0088 to csv-sniffer (RustSec/advisory-db#994)7d12d952raw-cpuid: OptionalDeserializeimplementations lacking validation (RustSec/advisory-db#671)7bf56198Assigned RUSTSEC-2021-0089 to raw-cpuid (RustSec/advisory-db#995)690cf956ash: Reading on uninitialized memory may cause UB (util::read_spv()) (RustSec/advisory-db#680)2645debeAssigned RUSTSEC-2021-0090 to ash (RustSec/advisory-db#996)22325889gfx-auxil:Readon uninitialized buffer may cause UB (gfx_auxil::read_spirv()) (RustSec/advisory-db#681)cf6f9d25Assigned RUSTSEC-2021-0091 to gfx-auxil (RustSec/advisory-db#997)460ac8beAdd advisory for uninitialized exposure in messagepack-rs (RustSec/advisory-db#835)8d3e99a3Assigned RUSTSEC-2021-0092 to messagepack-rs (RustSec/advisory-db#998)670b2887Add advisory for data race in crossbeam-deque (RustSec/advisory-db#970)14af874fAssigned RUSTSEC-2021-0093 to crossbeam-deque (RustSec/advisory-db#999)89842247Add advisory for out-of-bounds read in rdiff (RustSec/advisory-db#862)4b018059Assigned RUSTSEC-2021-0094 to rdiff (RustSec/advisory-db#1000)59cdbf21mopa is technically unsound (RustSec/advisory-db#927)b6a20c1bAssigned RUSTSEC-2021-0095 to mopa (RustSec/advisory-db#1001)101d914eRUSTSEC-2021-0089 has been patched in raw-cpuid 9.1.1 (RustSec/advisory-db#1002)45f9665fFix CVE alias CVE-2020-35920 (RustSec/advisory-db#1003)d7112723ash: RUSTSEC-2021-0090 has been patched in 0.33.1 (RustSec/advisory-db#1004)2f117ce3spirv_headers is deprecated (RustSec/advisory-db#982)9f1d4c90Assigned RUSTSEC-2021-0096 to spirv_headers (RustSec/advisory-db#1005)100b12d9add cve-2021-3711 for openssl-src (RustSec/advisory-db#1006)ceea3987Assigned RUSTSEC-2021-0097 to openssl-src (RustSec/advisory-db#1008)10b6f1e3add cve-2021-3712 for openssl-src (RustSec/advisory-db#1007)1be95342Assigned RUSTSEC-2021-0098 to openssl-src (RustSec/advisory-db#1009)0f2bc2d6Add unmaintained crate advisory forcosmos_sdk(RustSec/advisory-db#1010)138fb157Assigned RUSTSEC-2021-0099 to cosmos_sdk (RustSec/advisory-db#1011)4744ee62Add sha2 v0.9.7 AVX2 bug (RustSec/advisory-db#1012)3e31699cAssigned RUSTSEC-2021-0100 to sha2 (RustSec/advisory-db#1013)27820b70Add rustsec advisory for GHSA-vc5p-j8vw-mc6x (RustSec/advisory-db#1014)b59e06ecAssigned RUSTSEC-2021-0101 to pleaser (RustSec/advisory-db#1026)841ecbf1Add rustsec advisory for GHSA-pp74-39w2-v4w9 (RustSec/advisory-db#1016)9dbe2627Assigned RUSTSEC-2021-0102 to pleaser (RustSec/advisory-db#1027)9a81b244Add rustsec advisory for GHSA-82hm-vh7g-hrh9 (RustSec/advisory-db#1021)8e5d566eAssigned RUSTSEC-2021-0103 to molecule (RustSec/advisory-db#1028)95107000Add rustsec advisory for GHSA-f3fg-5j9p-vchc (RustSec/advisory-db#1020)4b4a4d8dAssigned RUSTSEC-2021-0104 to pleaser (RustSec/advisory-db#1029)e5b66bfeAdd rustsec advisory for GHSA-7cqg-8449-rmfv (RustSec/advisory-db#1022)71f18afdAssigned RUSTSEC-2020-0156 to libsecp256k1-rs (RustSec/advisory-db#1030)fa5597eeAdd rustsec advisory for GHSA-5xg3-j2j6-rcx4 (RustSec/advisory-db#1023)fe4e45e5Assigned RUSTSEC-2021-0105 to git-delta (RustSec/advisory-db#1031)10fa105fAdd rustsec advisory for GHSA-p24j-h477-76q3 (RustSec/advisory-db#1017)ec858f80Assigned RUSTSEC-2021-0106 to bat (RustSec/advisory-db#1032)181cf280Add rustsec advisory for GHSA-v666-6w97-pcwm (RustSec/advisory-db#1015)f969fe89Add rustsec advisory for GHSA-mm4m-qg48-f7wc (RustSec/advisory-db#1018)315a5c06Assigned RUSTSEC-2020-0157 to vm-memory, RUSTSEC-2021-0107 to ckb (RustSec/advisory-db#1033)ef8532beAdd rustsec advisory for GHSA-48vq-8jqv-gm6f (RustSec/advisory-db#1024)50464643Assigned RUSTSEC-2021-0108 to ckb (RustSec/advisory-db#1034)b838a4c6Add rustsec advisory for GHSA-45p7-c959-rgcm (RustSec/advisory-db#1025)a665da67Add GHSA alias to RUSTSEC-2021-0102204c1ae2add GHSA alias to RUSTSEC-2021-0101 (RustSec/advisory-db#1036)8b677b0fAssigned RUSTSEC-2021-0109 to ckb (RustSec/advisory-db#1035)b99d8a13Add GHSA alias to RUSTSEC-2021-0104 (RustSec/advisory-db#1038)464cc079Add GHSA alias to RUSTSEC-2020-01562b1a5c55Add GHSA alias to RUSTSEC-2021-0105 (RustSec/advisory-db#1041)b5756eddAdd GHSA alias to RUSTSEC-2021-0103 (RustSec/advisory-db#1040)d202965dAdd GHSA alias to RUSTSEC-2021-0106 (RustSec/advisory-db#1039)6c092fecSwitch to rustsec-admin 0.5.2 (OSV 1.0) and branchosv(RustSec/advisory-db#1042)ab0a8432Mention OSV in readme (RustSec/advisory-db#1043)3d742d44Add recent Wasmtime CVEs (RustSec/advisory-db#1046)26d56f76Assigned RUSTSEC-2021-0110 to wasmtime (RustSec/advisory-db#1047)057094d6Add advisory for memory corruption in tremor-script < 0.11.6 (RustSec/advisory-db#1045)9fead378Assigned RUSTSEC-2021-0111 to tremor-script (RustSec/advisory-db#1048)bb15a55bAdd disappeared advisories (RustSec/advisory-db#1049)d5c7ae1cAssigned RUSTSEC-2021-0112 to tectonic_xdv, RUSTSEC-2021-0113 to metrics-util (RustSec/advisory-db#1050)