[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#987294: marked as done (nmu: rust-sniffglue_0.11.1-6)

Your message dated Wed, 21 Apr 2021 21:13:24 +0200
with message-id <20210421191324.GA23678@ramacher.at>
and subject line Re: Bug#987294: nmu: rust-sniffglue_0.11.1-6
has caused the Debian Bug report #987294,
regarding nmu: rust-sniffglue_0.11.1-6
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
987294: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987294
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: binnmu

rust-stackvector recently had a memory safety bug that was reported by the
rustsec team as a security issue and the Debian security team as a rc bug.

I fixed this in rust-stackvector 1.6.0-3 , but due to the way rust packaging
works applications need to be rebuilt before they will pick up the fix. 
Based on grepping the package indexes, I belive that rust-sniffglue is the only
application that is built against rust-stackvector (though it's possible that
there are applications built with older tooling that I have missed).

nmu rust-sniffglue_0.11.1-6 . ANY . unstable . -m "Rebuild against rust-stackvector 1.0.6-3"

-- System Information:
Debian Release: 10.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'oldoldstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-10-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

--- End Message ---
--- Begin Message --- 
On 2021-04-21 00:12:44, plugwash wrote:
> Package: release.debian.org
> Severity: normal
> User: release.debian.org@packages.debian.org
> Usertags: binnmu
> 
> rust-stackvector recently had a memory safety bug that was reported by the
> rustsec team as a security issue and the Debian security team as a rc bug.
> 
> I fixed this in rust-stackvector 1.6.0-3 , but due to the way rust packaging
> works applications need to be rebuilt before they will pick up the fix. 
> Based on grepping the package indexes, I belive that rust-sniffglue is the only
> application that is built against rust-stackvector (though it's possible that
> there are applications built with older tooling that I have missed).
> 
> nmu rust-sniffglue_0.11.1-6 . ANY . unstable . -m "Rebuild against rust-stackvector 1.0.6-3"

Scheduled

Cheers
-- 
Sebastian Ramacher

--- End Message ---
Reply to: