Your message dated Wed, 30 Dec 2020 16:35:00 +0000
with message-id <[email protected]>
and subject line Bug#976870: fixed in rust-net2 0.2.37-1
has caused the Debian Bug report #976870,
regarding RUSTSEC-2020-0078: net2: `net2` invalidly assumes the memory layout
of std::net::SocketAddr
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
976870: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=976870
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: rust-net2
Version: 0.2.33-1
Severity: important
Tags: security upstream
Forwarded: https://github.com/deprecrated/net2-rs/issues/105
X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi
See https://rustsec.org/advisories/RUSTSEC-2020-0078.html and
https://github.com/deprecrated/net2-rs/issues/105 for details.
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: rust-net2
Source-Version: 0.2.37-1
Done: Peter Michael Green <[email protected]>
We believe that the bug you reported is fixed in the latest version of
rust-net2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Peter Michael Green <[email protected]> (supplier of updated rust-net2
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 30 Dec 2020 16:04:14 +0000
Source: rust-net2
Architecture: source
Version: 0.2.37-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Rust Maintainers
<[email protected]>
Changed-By: Peter Michael Green <[email protected]>
Closes: 976870
Changes:
rust-net2 (0.2.37-1) unstable; urgency=medium
.
* Team upload.
* Package net2 0.2.37 from crates.io using debcargo 2.4.3
- Includes upstream fix for undefined behaviour that
is likely to cause breakage with future rustc versions
(Closes: 976870)
Checksums-Sha1:
cb8c89fe832e48f8405801e7f8d174687f65ff41 2514 rust-net2_0.2.37-1.dsc
ee031fbb1307dfd4dbaceec7f5ea173ed89cb886 21311 rust-net2_0.2.37.orig.tar.gz
2f727d2f4e1ea5abc954e3cb80cdee9d5dd290e4 2972 rust-net2_0.2.37-1.debian.tar.xz
2d3cc1dc6b85a8a0be93ec0749bfd66baff087ae 7358
rust-net2_0.2.37-1_source.buildinfo
Checksums-Sha256:
7cc2ff0fd4f9d0bede3efa3c07b5f4f3e24bf5edc8024118d3563c08b6827870 2514
rust-net2_0.2.37-1.dsc
391630d12b68002ae1e25e8f974306474966550ad82dac6886fb8910c19568ae 21311
rust-net2_0.2.37.orig.tar.gz
da8442b1741742fc49731361d31bb4ac9c76e2d0dbb8bb3087aed5b871d7955b 2972
rust-net2_0.2.37-1.debian.tar.xz
dc475d5f0f85ac16a563cdbc0fc907d71fcb69369c4efaa471fa659777288fd3 7358
rust-net2_0.2.37-1_source.buildinfo
Files:
b1c574cabfc04325b73d5f49e3300d1f 2514 rust optional rust-net2_0.2.37-1.dsc
ff6c054468eab826f0dab7cc9a3fe557 21311 rust optional
rust-net2_0.2.37.orig.tar.gz
f9fd944023eaacb159289216b18adc02 2972 rust optional
rust-net2_0.2.37-1.debian.tar.xz
428972e3578b9dadae9e38d27249f700 7358 rust optional
rust-net2_0.2.37-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=3rTY
-----END PGP SIGNATURE-----
--- End Message ---