curl (>=0.4.7, <=0.4.8), dns-lookup (>=0.7.0, <=0.8.1) +5 more potentially affected by CVE-2020-35919 +1 more via socket2 (0.2.4)

socket2 CARGO version 0.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on socket2 and may be impacted: - curl =0.4.7, =0.7.0, =0.3.0-beta.1, =0.1.0, =0.2.2, =0.2.4 - miow 0.3.0 Source cves: CVE-2020-35919, CVE-2020-35920 Source advisory:...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5218 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-HJ9H-WRGG-HGMX...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5218 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-5WG8-7C9Q-794V...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5218 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-VH4P-6J7G-F4J9...

cid (>=0.3.0, <=0.4.0), cid_fork_rlay (0.3.1) +58 more potentially affected by CVE-2020-35909 via multihash (>=0.8.0, <=0.10.1)

multihash CARGO version =0.8.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.9, =0.0.1-alpha1, =0.0.18 and more Source cves: CVE-2020-35909 Source advisory: OSV:GHSA-H7QH-3H6F-W79P...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5218 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-PPJ3-7JW3-8VC4...

acme-client (>=0.1.0, <=0.2.0), aerial (0.1.0) +693 more potentially affected by CVE-2020-35881 via traitobject (>=0.0.1, <=0.0.3)

traitobject CARGO version =0.0.1, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.7.0, =0.1.0, =0.0.1, =0.1.0, =0.5.0, =0.6.5 - arubaripple 0.0.1 and more Source cves: CVE-2020-35881 Source advisory: OSV:GHSA-J79J-CX3H-G27H...

a3mo_lib (>=0.1.0, <=0.1.1), acid-store (>=0.1.0, <=0.11.2) +167 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)

rusqlite CARGO version =0.2.0, =0.1.0, =0.1.0, =0.2.11, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.40.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =1.2.5 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...

a3mo_lib (>=0.1.0, <=0.1.1), acid-store (>=0.1.0, <=0.11.2) +167 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)

rusqlite CARGO version =0.2.0, =0.1.0, =0.1.0, =0.2.11, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.40.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =1.2.5 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...

a3mo_lib (>=0.1.0, <=0.1.1), acid-store (>=0.1.0, <=0.11.2) +167 more potentially affected by CVE-2020-35866 +7 more via rusqlite (>=0.2.0, <=0.22.0)

rusqlite CARGO version =0.2.0, =0.1.0, =0.1.0, =0.2.11, =1.0.0, =0.2.2-beta.1, =0.2.0, =0.40.0, =0.8.0, =0.6.0, =1.1.0, =1.1.0, =1.2.5 and more Source cves: CVE-2020-35866, CVE-2020-35867, CVE-2020-35868, CVE-2020-35869, CVE-2020-35870, CVE-2020-35871, CVE-2020-35872, CVE-2020-35873 Source...

fac (>=0.5.2, <=0.5.3) potentially affected by CVE-2020-35874 via internment (0.3.13)

internment CARGO version 0.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on internment and may be impacted: - fac =0.5.2, =0.5.3 Source cves: CVE-2020-35874 Source advisory: OSV:GHSA-96W3-P368-4H8C...

akaze (>=0.1.0, <=0.1.2), babelfish (>=0.1.0, <=0.1.1) +73 more potentially affected by CVE-2019-25001 via serde_cbor (>=0.3.3, <=0.9.0)

serdecbor CARGO version =0.3.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.0, =0.10.0, =0.10.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.3 - ec-client 0.1.0 and more Source cves: CVE-2019-25001 Source advisory: OSV:GHSA-XR7R-88QV-Q7HM...

accepted (>=0.1.13, <=0.1.20), actors-rs (>=0.1.0, <=0.1.4) +325 more potentially affected by CVE-2020-25573 via linked-hash-map (>=0.0.9, <=0.4.2)

linked-hash-map CARGO version =0.0.9, =0.1.13, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.5.0, =0.3.1, =0.3.2, =0.1.0, =0.1.0, =0.7.1 and more Source cves: CVE-2020-25573 Source advisory: OSV:GHSA-R43H-GMRM-H5C9...

acheron (0.1.0), actix_web_metrics_mw (>=0.0.1, <=0.3.1) +140 more potentially affected by CVE-2020-25791 +5 more via sized-chunks (>=0.1.3, <=0.5.3)

sized-chunks CARGO version =0.1.3, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.10.0, =0.10.0, =0.1.1, =0.33.0, =0.45.1 - cargo-authors 0.5.0 and more Source cves: CVE-2020-25791, CVE-2020-25792, CVE-2020-25793, CVE-2020-25794, CVE-2020-25795, CVE-2020-25796 Source advisor...

async_docker (>=0.1.0, <=0.1.1), cargo (>=0.4.0, <=0.8.0) +11 more potentially affected by CVE-2018-20990 via tar (>=0.2.14, <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole 0.1.0 Source cves: CVE-2018-20990 Source advisory: OSV:GHSA-2367-C296-3MP2...

a-bot (0.0.1), a-gpt (>=0.1.0, <=0.4.0) +13688 more potentially affected by unknown CVE via ansi_term (>=0.5.2, <=0.12.1)

ansiterm CARGO version =0.5.2, =0.1.0, =0.2.0, =0.0.2, =0.4.1, =0.9.0, =0.2.1, =0.1.0, =0.1.0, =0.7.0, =0.2.4, =0.8.0 - ablescriptcli 0.2.0 - ableton-link 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0139...

Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. The following packages have been upgraded to a later upstream version: rust 1.52.1. BZ1953002 Security Fixes: rust: optimization for joining strings can cause...

rust-toolset:rhel8 security, bug fix, and enhancement update

An update is available for rust-toolset, rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rust Toolset provides the Rust programming language compiler rustc...

async_docker (>=0.1.0, <=0.1.1), cargo (>=0.4.0, <=0.8.0) +11 more potentially affected by CVE-2021-38511 via tar (>=0.2.14, <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole 0.1.0 Source cves: CVE-2021-38511 Source advisory: OSV:RUSTSEC-2021-0080...

abbegm (0.5.0), actix-jwt-session (>=0.1.0, <=0.1.1) +394 more potentially affected by CVE-2021-38191 via tokio (>=0.3.7, <=1.5.0)

tokio CARGO version =0.3.7, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.2.0, =0.6.0, =0.1.0, =0.3.6, =0.3.15 and more Source cves: CVE-2021-38191 Source advisory: OSV:RUSTSEC-2021-0072...