Your message dated Tue, 26 May 2026 20:32:08 +0000
with message-id <[email protected]>
and subject line Bug#1128404: fixed in rust-time 0.3.37-1+deb13u1
has caused the Debian Bug report #1128404,
regarding rust-time: last upstream fixes a security issue impacting trixie
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1128404: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1128404
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: rust-time
Version: 0.3.37-1
Tags: trixie security fixed-upstream
Upstream changelog[1] for 0.3.47 include a Security issue.
This can be tracked to commit 1c63dc7985b8fa26bd8c689423cc56b7a03841ee.
All lines modified by this commit were introduced in commit
e44875d26490edecaf6cdd5dfacc310916c76adb, included in 0.3.6, so I
believe 0.3.37 to be impacted.
It is the only security issue currently mentioned post-0.3.37 in their
changelog.
[1] https://github.com/time-rs/time/blob/main/CHANGELOG.md
--- End Message ---
--- Begin Message ---
Source: rust-time
Source-Version: 0.3.37-1+deb13u1
Done: Bastian Germann <[email protected]>
We believe that the bug you reported is fixed in the latest version of
rust-time, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bastian Germann <[email protected]> (supplier of updated rust-time package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 24 Feb 2026 17:00:26 +0100
Source: rust-time
Architecture: source
Version: 0.3.37-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Rust Maintainers
<[email protected]>
Changed-By: Bastian Germann <[email protected]>
Closes: 1128404
Changes:
rust-time (0.3.37-1+deb13u1) trixie; urgency=medium
.
* Backport upstream fix for CVE-2026-25727 (Closes: #1128404)
Checksums-Sha1:
2e7d8f4956dd0fdde422ede2ed64a11d7a073532 2598 rust-time_0.3.37-1+deb13u1.dsc
e521dba278bbdf51b17f63dcd410f6694e9b5e8e 5640
rust-time_0.3.37-1+deb13u1.debian.tar.xz
2159a1524e7edb80bfb75e7d9db696202287a208 10312
rust-time_0.3.37-1+deb13u1_source.buildinfo
Checksums-Sha256:
63fab8846146872bc730b6b4760f09b420924675f73ff47eb6c8603c8103e9ee 2598
rust-time_0.3.37-1+deb13u1.dsc
4791946e5349fc0068d04d02090d7743ad092a36e13cbaaeeff4380d137091a9 5640
rust-time_0.3.37-1+deb13u1.debian.tar.xz
e67b8eb08a2b7e1b3a40da81860a07512a9718d2b505d2160d1fcf0c3f5eb78e 10312
rust-time_0.3.37-1+deb13u1_source.buildinfo
Files:
c3fbc1505b7aba0234b836d8aa9012b2 2598 rust optional
rust-time_0.3.37-1+deb13u1.dsc
abdeb557f75cb8a6fecff7b52a669b4d 5640 rust optional
rust-time_0.3.37-1+deb13u1.debian.tar.xz
c5b1aed07fc3c4efa3142e64cab63917 10312 rust optional
rust-time_0.3.37-1+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=kWUw
-----END PGP SIGNATURE-----
pgpEwAMONhRJL.pgp
Description: PGP signature
--- End Message ---
