coreos-installer vulnerabilities (crates.io)

2 vulnerabilities.

• coreos-installer crates.io coreos-installer < 0.10.0 writes world-readable Ignition config to installed system CVE-2021-3917 Fix available 5.5 MediumNovember 8, 2021
• coreos-installer crates.io coreos-installer improperly verifies GPG signature when decompressing gzipped artifact CVE-2021-20319 Fix available 7.8 HighOctober 12, 2021