From 52bab4c25db321319b1a3cee1705fa6990bbf1dc Mon Sep 17 00:00:00 2001 From: "Neal H. Walfield" Date: Fri, 17 Apr 2026 09:16:43 +0200 Subject: [PATCH] Update rand advisory to include an additional patched version. The fix was backported to the 0.8 branch and released as version 0.8.6. Update the advisory to indicate that this version is also safe. --- crates/rand/RUSTSEC-2026-0097.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crates/rand/RUSTSEC-2026-0097.md b/crates/rand/RUSTSEC-2026-0097.md index 4c58b9331..d42b843d0 100644 --- a/crates/rand/RUSTSEC-2026-0097.md +++ b/crates/rand/RUSTSEC-2026-0097.md @@ -15,7 +15,7 @@ aliases = ["GHSA-cq8v-f236-94qc"] "rand::thread_rng" = ["< 0.10.0, >= 0.7.0"] [versions] -patched = [">= 0.10.1", "< 0.10.0, >= 0.9.3"] +patched = [">= 0.10.1", "< 0.10.0, >= 0.9.3", "< 0.9.0, >= 0.8.6"] unaffected = ["< 0.7.0"] ```