This bug was fixed in the package rust-sequoia-sqv - 1.4.0-1ubuntu1

---------------
rust-sequoia-sqv (1.4.0-1ubuntu1) stonking; urgency=medium

  * Merge with Debian unstable. Remaining changes:
    - debian/rules:
      + enable build size optimizations on 32-bit
      + add vendor targets
    - debian/patches:
      + remove unused deps from Cargo.toml
      + run cargo update
    - debian/control:
      + remove vendored Build-Depends-Arch
      + add libssl-dev and pkgconf Depends
      + Build-Depend on libclang-dev for bindgen
      + Update XS-Vendored-Sources-Rust field
    - d/README.source: add vendoring instructions
    - Update vendored rust crates
    - Update debian/source/include-binaries

rust-sequoia-sqv (1.4.0-1) unstable; urgency=medium

  * Package sequoia-sqv 1.4.0 from crates.io using debcargo 2.8.3
    - update d/copyright years.

rust-sequoia-sqv (1.3.0-5ubuntu1) stonking; urgency=medium

  * Merge with Debian unstable. Remaining changes: (LP: #2153407)
    - debian/control:
      + add libssl-dev and pkg-config Depends
      + add XS-Vendored-Sources-Rust
      + remove vendored Build-Depends-Arch
    - debian/patches: remove unused deps from Cargo.toml
    - debian/rules:
      + enable build size optimizations on 32-bit
      + add rust-vendor targets
    - rust-vendor/: add vendored dependencies
  * New Changes:
    - Update rust-vendor due to CVEs:
      + sequoia-openpgp from 2.0.0 to 2.3.0 (CVE-2025-67897)
      + openssl from 0.10.71 to 0.10.80 (CVE-2025-3416)
    - Refresh patches:
      + remove-dependencies.patch
    - Move rust-vendor to debian/
    - debian/rules: add new vendor targets and drop tarball creation
    - debian/README.source: add vendoring instructions
    - pkg-config -> pkgconf

rust-sequoia-sqv (1.3.0-5) unstable; urgency=medium

  * Package sequoia-sqv 1.3.0 from crates.io using debcargo 2.7.11

rust-sequoia-sqv (1.3.0-4) unstable; urgency=medium

  * Package sequoia-sqv 1.3.0 from crates.io using debcargo 2.7.8
  * Install fish completion file in new location /usr/share/fish\
    /vendor_completions.d/ - thanks to Gian Piero Carrubba. Closes: #1121436.

 -- Julian Andres Klode <[email protected]>  Mon, 13 Jul 2026 11:51:26
+0200

** Changed in: rust-sequoia-sqv (Ubuntu)
       Status: In Progress => Fix Released

** CVE added: https://cve.org/CVERecord?id=CVE-2025-3416

** CVE added: https://cve.org/CVERecord?id=CVE-2025-67897

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2153407

Title:
  Please merge 1.3.0-5 into Stonking

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rust-sequoia-sqv/+bug/2153407/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to