tocsin

CVE-2021-38191

2 advisories.

crates.io/tokio CVE-2021-38191: medium 5.9

Race condition in tokio

Action: Upgrade tokio to 1.5.1 or later.

cargo update -p tokio --precise 1.8.1
cargo update -p tokio --precise 1.7.2
cargo update -p tokio --precise 1.6.3
cargo update -p tokio --precise 1.5.1

Affected

introducedfixedlast affected
1.8.01.8.1-
1.7.01.7.2-
1.6.01.6.3-
0.3.01.5.1-

Fixed versions

1.8.11.7.21.6.31.5.1

Sources

CVE-2021-38191 · published · modified · JSON

crates.io/tokio CVE-2021-38191: unknown

Task dropped in wrong thread when aborting `LocalSet` task

Action: Upgrade tokio to 1.5.1 or later.

cargo update -p tokio --precise 1.5.1
cargo update -p tokio --precise 1.6.3
cargo update -p tokio --precise 1.7.2
cargo update -p tokio --precise 1.8.1

Affected

introducedfixedlast affected
0.3.01.5.1-
1.6.01.6.3-
1.7.01.7.2-
1.8.01.8.1-

Fixed versions

1.5.11.6.31.7.21.8.1

Sources

CVE-2021-38191 · published · modified · JSON