rustsec / advisory-db

Security advisory database for Rust crates published through crates.io
https://rustsec.org
Other
887 stars 339 forks source link

Add advisory for tor-circmgr TROVE-2024-003 #1957

Closed ijackson closed 1 month ago

ijackson commented 1 month ago

There are going to be two advisories. There are in fact two bugs due to entirely different code paths, with similar impact.

I am making these as separate MRs since doing otherwise would probably break some tooling.

Shnatsel commented 1 month ago

Thank you for the report, and sorry for the delay!

I've added the CVE ID now that a CVE has been assigned. I'll merge as soon as CI passes.