Most recent entries from osv_rustsec

RUSTSEC-2016-0004 — libusb is unmaintained; use rusb instead

Sat, 10 Sep 2016 12:00:00 +0000

Affected: crates.io: libusb

The `libusb` crate has not seen a release since September 2016, and its author is unresponsive.

The `rusb` crate is a maintained fork:

https://github.com/a1ien/rusb

RUSTSEC-2016-0006 — `cassandra` crate is unmaintained; use `cassandra-cpp` instead

Thu, 15 Dec 2016 12:00:00 +0000

Affected: crates.io: cassandra

The `cassandra` crate has not seen a release since December 2016, and its author is unresponsive.

The `cassandra-cpp` crate is a maintained fork:

https://github.com/Metaswitch/cassandra-rs

RUSTSEC-2017-0007 — lz4-compress is unmaintained

Mon, 17 Apr 2017 12:00:00 +0000

Affected: crates.io: lz4-compress

[According to the developers](https://gitlab.redox-os.org/redox-os/tfs/issues/89) this crate is no longer maintained.

The suggested alternative is [`lz4-compression`](https://crates.io/crates/lz4-compression), a maintained fork of `lz4-compress`.

See also [lz-fear](https://crates.io/crates/lz-fear) which is compatible with the reference LZ4 implementation in C, but not with lz4-compress.

RUSTSEC-2018-0014 — chan is end-of-life; use crossbeam-channel instead

Tue, 31 Jul 2018 12:00:00 +0000

Affected: crates.io: chan

**`chan` has reached its end-of-life and is now deprecated.**

The intended successor of this crate is [`crossbeam-channel`](https://github.com/crossbeam-rs/crossbeam/tree/master/crossbeam-channel). Its API is strikingly similar, but comes with a much better `select!` macro, better performance, a better test suite and an all-around better implementation.

RUSTSEC-2018-0015 — term is looking for a new maintainer

Mon, 19 Nov 2018 12:00:00 +0000

Affected: crates.io: term

The author of the `term` crate does not have time to maintain it and is looking for a new maintainer.

Some maintained alternatives you can potentially switch to instead, depending on your needs:

- [`crossterm`](https://github.com/crossterm-rs/crossterm) - [`termcolor`](https://crates.io/crates/termcolor) - [`yansi`](https://crates.io/crates/yansi)

RUSTSEC-2018-0016 — quickersort is deprecated and unmaintained

Sat, 30 Jun 2018 12:00:00 +0000

Affected: crates.io: quickersort

The author of the `quickersort` crate has deprecated it and does not recommend using it anymore.

Everything in it has been incorporated into [std::sort_unstable] in the standard library as of Rust 1.20.

[std::sort_unstable]: https://doc.rust-lang.org/stable/std/primitive.slice.html#method.sort_unstable

RUSTSEC-2018-0017 — `tempdir` crate has been deprecated; use `tempfile` instead

Tue, 13 Feb 2018 12:00:00 +0000

Affected: crates.io: tempdir

The [`tempdir`](https://crates.io/crates/tempdir) crate has been deprecated and the functionality is merged into [`tempfile`](https://crates.io/crates/tempfile).

RUSTSEC-2019-0032 — crust repo has been archived; use libp2p instead

Thu, 21 Nov 2019 12:00:00 +0000

Affected: crates.io: crust

** The `crust` crate repo was archived with no warning or explanation.**

Given that it was archived with no warning or successor, there's not an official replacement but [`rust-libp2p`](https://github.com/libp2p/rust-libp2p) looks like it's got a similar feature set and is actively maintained.

RUSTSEC-2020-0003 — rust_sodium is unmaintained; switch to a modern alternative

Mon, 20 Jan 2020 12:00:00 +0000

Affected: crates.io: rust_sodium

The `rust_sodium` crate is no longer maintained by its current owner, who advise in the repository readme that they are looking for someone else to take ownership of it.

We recommend you switch to an alternative crate such as: - [`sodiumoxide`](https://crates.io/crates/sodiumoxide)

RUSTSEC-2020-0010 — tiberius is unmaintained

Fri, 28 Feb 2020 12:00:00 +0000

Affected: crates.io: tiberius

The author of `tiberius` has archived the GitHub repository and left the following note:

> I do not have the time to overhaul the library and do not intend to further > maintain the 0.3 version relying on the old futures ecosystem.

Suggested alternatives are:

- [`odbc`](https://crates.io/crates/odbc) - [`sqlx`](https://github.com/launchbadge/sqlx/issues/116) (forthcoming)