RUSTSEC-2021-0072: Task dropped in wrong thread when aborting LocalSet task

[github-actions]

Task dropped in wrong thread when aborting LocalSet task

Details
Package	tokio
Version	0.3.7
URL	tokio-rs/tokio#3929
Date	2021-07-07
Patched versions	>=1.5.1, <1.6.0,>=1.6.3, <1.7.0,>=1.7.2, <1.8.0,>=1.8.1
Unaffected versions	<0.3.0

When aborting a task with JoinHandle::abort, the future is dropped in the
thread calling abort if the task is not currently being executed. This is
incorrect for tasks spawned on a LocalSet.

This can easily result in race conditions as many projects use Rc or RefCell
in their Tokio tasks for better performance.

See tokio#3929 for more details.

See advisory page for additional details.