Your message dated Sun, 06 Nov 2022 02:36:00 +0000
with message-id <[email protected]>
and subject line Bug#996913: fixed in rust-chrono 0.4.22-1
has caused the Debian Bug report #996913,
regarding rust-chrono: Potential segfault in localtime_r invocations
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
996913: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=996913
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: rust-chrono
Severity: minor
Tags: security
Dear Maintainer,
This package is affected by this security vulnerability that isn't tracked by
debian yet:
https://rustsec.org/advisories/RUSTSEC-2020-0159.html
-- System Information:
Debian Release: bookworm/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 5.10.0-1-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
--- End Message ---
--- Begin Message ---
Source: rust-chrono
Source-Version: 0.4.22-1
Done: Peter Michael Green <[email protected]>
We believe that the bug you reported is fixed in the latest version of
rust-chrono, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Peter Michael Green <[email protected]> (supplier of updated rust-chrono
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 06 Nov 2022 01:41:43 +0000
Source: rust-chrono
Architecture: source
Version: 0.4.22-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Rust Maintainers
<[email protected]>
Changed-By: Peter Michael Green <[email protected]>
Closes: 996913 1017084 1022029
Changes:
rust-chrono (0.4.22-1) unstable; urgency=medium
.
[ Blair Noctis ]
* Team upload.
* Package chrono 0.4.22 from crates.io using debcargo 2.5.0
* Drop strip-wasm.patch, js-sys and wasm-bindgen are packaged, but keep
wasm-bindgen-test off
* Patch out Windows dep
.
[ Peter Michael Green ]
* Team upload.
* Package chrono 0.4.21 from crates.io using debcargo 2.5.0
(Closes: #996913, #1017084, #1022029)
* Drop relax-dep.diff, Debian now has the required version of time 0.1
(though we currently disable time 0.1 in a later patch anyway)
* Drop update-bincode-to-1.0.patch, upstream now depends on bincode 1.3
* Update remaining patches for new upstream.
Checksums-Sha1:
b25672a6310a9ca9d23419ab88e0b2ca867a6919 2684 rust-chrono_0.4.22-1.dsc
7d4ce5ab158545ffbbf0ede56752151ce30a9772 185570 rust-chrono_0.4.22.orig.tar.gz
ec3ced53ac98389f6b6e488f71b4b3a2e7a7885b 5064
rust-chrono_0.4.22-1.debian.tar.xz
3ba5b03e3db05b97f053d2c20c51b9c2b061e772 8814
rust-chrono_0.4.22-1_source.buildinfo
Checksums-Sha256:
8e9ec9e5876c0b8c4785ea169fe67acb3652e522ebcc3598f86f09e45d3e1dca 2684
rust-chrono_0.4.22-1.dsc
bfd4d1b31faaa3a89d7934dbded3111da0d2ef28e3ebccdb4f0179f5929d1ef1 185570
rust-chrono_0.4.22.orig.tar.gz
961bff7b0ce045bf5b834c72dbbf327cf858f587dd0173cba241d1390dbac66a 5064
rust-chrono_0.4.22-1.debian.tar.xz
ffbb7f4ae672b812ee7a0ee06f2a2f24a83debdd0c6b2ca2276a51f88df89dac 8814
rust-chrono_0.4.22-1_source.buildinfo
Files:
509501a08f151c794570abba8a146e9b 2684 rust optional rust-chrono_0.4.22-1.dsc
0a6cbf6ef95c7e7db7837f58db8d1773 185570 rust optional
rust-chrono_0.4.22.orig.tar.gz
80b8ae8d995fc2061d7bddb1daf135de 5064 rust optional
rust-chrono_0.4.22-1.debian.tar.xz
b42cf4d0c1720bf0c22f52bcbeb15103 8814 rust optional
rust-chrono_0.4.22-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=p/X7
-----END PGP SIGNATURE-----
--- End Message ---