alamb opened a new issue, #11100: URL: https://github.com/apache/arrow-rs/issues/11100
### Describe the bug https://github.com/apache/arrow-rs/actions/runs/35000353926/job/104486931566 ``` Run cargo audit info: syncing channel updates for 1.98.1-x86_64-unknown-linux-gnu info: latest update on 2026-09-03 for version 1.98.1 (48a229cea 2026-09-01) info: downloading 5 components warn: the missing active toolchain `1.98.1-x86_64-unknown-linux-gnu` has been auto-installed warn: this might cause rustup commands to take longer time to finish than expected info: you may opt out with `RUSTUP_AUTO_INSTALL=0` or `rustup set auto-install disable` Fetching advisory database from `[https://github.com/RustSec/advisory-db.git`](https://github.com/RustSec/advisory-db.git%60) Loaded 1246 security advisories (from /home/runner/.cargo/advisory-db) Updating crates.io index Scanning Cargo.lock for vulnerabilities (461 crate dependencies) error: 1 vulnerability found! Crate: rustls Version: 0.23.43 Title: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries Date: 2026-09-14 ID: RUSTSEC-2026-0285 URL: https://rustsec.org/advisories/RUSTSEC-2026-0285 Severity: 5.3 (medium) Solution: Upgrade to >=0.23.45 ``` ### To Reproduce _No response_ ### Expected behavior _No response_ ### Additional context _No response_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
