-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 17 Mar 2026 13:08:23 +0100
Source: rust-lz4-flex
Architecture: source
Version: 0.13.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
Changed-By: kpcyrd <git@rxv.cc>
Changes:
rust-lz4-flex (0.13.0-1) unstable; urgency=medium
.
* Package lz4_flex 0.13.0 from crates.io using debcargo 2.8.2
* Fixes leak of data from uninitialized memory, possibly revealing
sensitive information (RUSTSEC-2026-0041, GHSA-vvp9-7p8x-rfvv,
CVE-2026-32829)
Checksums-Sha1:
816b251e203bd81aaf80d87f9b64f62967c2ef24 2416 rust-lz4-flex_0.13.0-1.dsc
d2041e4678624a16fc23697ef3885d43598f9a7f 44558 rust-lz4-flex_0.13.0.orig.tar.gz
e17fd43042dfb88b8728b454972c9c67c666a5b0 3948 rust-lz4-flex_0.13.0-1.debian.tar.xz
faf6c02c0d9419090f8847888860d91f1969d3d5 8602 rust-lz4-flex_0.13.0-1_source.buildinfo
Checksums-Sha256:
c632982e32f07fb4eea253d85f5e830289d7fe83c11531b60428ed5b62ec87b8 2416 rust-lz4-flex_0.13.0-1.dsc
db9a0d582c2874f68138a16ce1867e0ffde6c0bb0a0df85e1f36d04146db488a 44558 rust-lz4-flex_0.13.0.orig.tar.gz
15d873fc488bbdddacfb544723e078de79167d599a5cf58fe39c2ac844f17a8e 3948 rust-lz4-flex_0.13.0-1.debian.tar.xz
9ac668d70e687dae3e654ee90f6ce2b1fc7c8f1e282cf8b7ce0f7630468ee2b6 8602 rust-lz4-flex_0.13.0-1_source.buildinfo
Files:
f30320ccbaf05013891a314c79dc013b 2416 rust optional rust-lz4-flex_0.13.0-1.dsc
03216cb01c7681e82b8eecf784c17110 44558 rust optional rust-lz4-flex_0.13.0.orig.tar.gz
c005a7c0a27b3abcd6f8e6fc646c3d37 3948 rust optional rust-lz4-flex_0.13.0-1.debian.tar.xz
48a81d6ffd66f39f41522050a34388a9 8602 rust optional rust-lz4-flex_0.13.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQI/BAEBCgApFiEEM+u4qOHFZTZFsSMqRaZQ4mOMU20FAmm5RDoLHGdpdEByeHYu
Y2MACgkQRaZQ4mOMU20StA//XnSQxUDQH+eJCCP9ecRG+vEPhWf5v1H1DMN6vl6I
rq7Ja2k+I1sHVwRbNPVNepBC6Q1wDbItI/BoTpLw9/xf2Bi0GqcrL8Netx1v1DV9
GApfXtdg4GrKi2AIPcPJpOHRg4oThOh6tZcKEXJ0wc6BlrEyULf1NS5EBLJt4/Qt
JpE9n8IlPo0gSDjsIIAuY4jw44NizX4JRciQcoFpOCm8hUG6gjybcTWMYYPLJ6BR
IUSBUWhWkywTOhLuUBqR0r1aAG/I+bM2rZnOWETTV91Q+CdOe9L5AM/67qj7/qab
IynEdf8PDpXQVhED3CeAeKjg9G9t6EI3Bzr8VXKeNzEMyDQLsFyl8EGX35RhH4AE
65dVEF2G7jfB6L//KWskEQ9IzordZPqUfndEkhijtzmUEusgMBtUQdttdUJkpOHg
c59wG6ubeYYfPE4GMYpmkgaEdQU/VXyPzQP4uXqXzeOnwo3KuCdVKM4wV1e7Lp70
ZaOOimUTwZF8XhUdZVZMkkuAW8ZVHJCwggUrdQcJByHFfy4LMu/V44T9/4YD5J24
N1G4B3tc3l7kC6jEoHm4SLTX+VzBmTg6ecvOtqOkX51LBas0ZDYIcyQ+FOOZKqyM
obhjY5wV64kYN7IdqAZUmHE24orruIbhRFpFTj63crd+z6q0BfAhXEoLUjLokqjO
FNM=
=bt/w
-----END PGP SIGNATURE-----
