Bug#986808: CVE-2021-29939

2021-04-12 Thread peter green
On 12/04/2021 23:54, peter green wrote: Hi. The stackvector crate does not appear to be maintained upstream. The upstream bug underlying this issue was reported back in February and has received no response from the upstream maintainer. Update: the upstream maintainer has now responded to

Bug#986808: CVE-2021-29939

2021-04-12 Thread peter green
Hi. The stackvector crate does not appear to be maintained upstream. The upstream bug underlying this issue was reported back in February and has received no response from the upstream maintainer. It seems the only user of the stackvector crate in Debian is the lexical_core crate. The

Bug#986808: CVE-2021-29939

2021-04-12 Thread Moritz Muehlenhoff
Source: rust-stackvector Severity: grave Tags: security X-Debbugs-Cc: Debian Security Team https://rustsec.org/advisories/RUSTSEC-2021-0048.html Cheers, Moritz