[SECURITY] Fedora 41 Update: rust-get-size-derive2-0.7.1-1.fc41

Derives the GetSize trait...

Fedora 42 : python-uv-build / ruff / rust-get-size-derive2 / rust-get-size2 / etc (2025-e60a4ba4d7)

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-e60a4ba4d7 advisory. uv / python-uv-build 0.9.7 https://github.com/astral-sh/uv/releases/tag/0.9.7 0.9.6 This release contains an upgrade to Astral's fork of asynczip, which...

afarray (>=0.1.0, <=0.1.1), get-size (>=0.1.0, <=0.1.4) +13 more potentially affected by unknown CVE via get-size-derive (>=0.1.2, <=0.1.3)

get-size-derive CARGO version =0.1.2, =0.1.0, =0.1.0, =0.0.0, =0.0.0, =0.0.1, =0.21.0, =0.21.0, =0.1.0, =0.7.0, =0.30.0, =0.30.0, =0.7.0, =0.7.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0427...

get-size-derive is unmaintained

get-size-derive's maintainer seems to be unreachable, with no commits and releases pushed for 1 year and no activity on the GitHub repo. get-size-derive also depends on attribute-derive ^0.6 a version of the crate which uses the yanked crate proc-macro-error. Possible Alternatives - get-size-deri...

PT-2024-40970

Name of the Vulnerable Software and Affected Versions get-size-derive affected versions not specified Description The maintainer of get-size-derive seems to be unreachable, with no commits and releases pushed for 1 year and no activity on the GitHub repository. Additionally, get-size-derive depen...