Skip to content

Commit

Permalink
Synchronize IDs (2024-02-15) (#1889)
Browse files Browse the repository at this point in the history
Co-authored-by: amousset <[email protected]>
  • Loading branch information
github-actions[bot] and amousset authored Feb 15, 2024
1 parent 8dc7746 commit 11d6227
Show file tree
Hide file tree
Showing 5 changed files with 6 additions and 2 deletions.
3 changes: 2 additions & 1 deletion crates/libgit2-sys/RUSTSEC-2024-0013.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,8 @@ url = "https://github.com/rust-lang/git2-rs/pull/1017"
references = ["https://github.com/libgit2/libgit2/releases/tag/v1.7.2"]
categories = ["denial-of-service", "code-execution", "memory-corruption"]
cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L"
related = ["GHSA-j2v7-4f6v-gpg8", "CVE-2024-24577", "GHSA-54mf-x2rh-hq9v", "CVE-2024-24575"]
related = ["CVE-2024-24575", "CVE-2024-24577", "GHSA-54mf-x2rh-hq9v", "GHSA-j2v7-4f6v-gpg8"]
aliases = ["GHSA-22q8-ghmq-63vf"]

[affected.functions]
"libgit2_sys::git_revparse_single" = ["< 0.16.2, >= 0.13.0"]
Expand Down
1 change: 1 addition & 0 deletions crates/pqc_kyber/RUSTSEC-2023-0079.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ references = ["https://kyberslash.cr.yp.to/faq.html", "https://kyberslash.cr.yp.
categories = ["crypto-failure"]
cvss = "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
keywords = ["timing-attack"]
aliases = ["GHSA-x5j2-g63m-f8g4"]

[affected]

Expand Down
1 change: 1 addition & 0 deletions crates/serde-json-wasm/RUSTSEC-2024-0012.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@ package = "serde-json-wasm"
date = "2024-01-24"
categories = ["denial-of-service"]
keywords = ["stack-overflow", "json"]
aliases = ["GHSA-rr69-rxr6-8qwf"]

[versions]
patched = [">= 1.0.1", ">= 0.5.2, < 1.0.0"]
Expand Down
1 change: 1 addition & 0 deletions crates/snow/RUSTSEC-2024-0011.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ date = "2024-01-23"
url = "https://github.com/mcginty/snow/security/advisories/GHSA-7g9j-g5jg-3vv3"
categories = ["denial-of-service"]
keywords = ["noise", "nonce", "state"]
aliases = ["GHSA-7g9j-g5jg-3vv3"]

[versions]
patched = [">= 0.9.5"]
Expand Down
2 changes: 1 addition & 1 deletion crates/svix/RUSTSEC-2024-0010.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ package = "svix"
date = "2024-02-06"
url = "https://github.com/svix/svix-webhooks/pull/1190"
categories = ["crypto-failure"]
aliases = ["GHSA-w277-wpqf-rcfv"]
aliases = ["CVE-2024-21491", "GHSA-747x-5m58-mq97", "GHSA-w277-wpqf-rcfv"]

[affected]
functions = { "svix::webhooks::Webhook::verify" = ["< 1.17.0"] }
Expand Down

0 comments on commit 11d6227

Please sign in to comment.