rust-gix-submodule - Debian Package Tracker

general

source: rust-gix-submodule (main)
version: 0.36.0-1
maintainer: Debian Rust Maintainers (archive) (DMD)
uploaders: Fabian Grünbichler [DMD]
arch: any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 0.16.0-1
testing: 0.34.0-1
unstable: 0.36.0-1

versioned links

0.16.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.34.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.36.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

librust-gix-submodule-dev

action needed

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

In watchfile debian/watch, reading webpage
  https://qa.debian.org/cgi-bin/fakeupstream.cgi?upstream=crates.io/gix-submodule failed: 500 Internal Server Error

Created: 2026-10-17 Last update: 2026-10-17 08:30

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

fatal: shallow file has changed since we read it

Created: 2026-10-09 Last update: 2026-10-17 04:33

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2026-10-17 Last update: 2026-10-17 09:01

15 open merge requests in Salsa normal

There are 15 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2026-10-02 Last update: 2026-10-09 06:19

1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:

CVE-2026-40034: (needs triaging) gix-submodule before 0.29.0 (gitoxide before 0.5.21, gix before 0.84.0) incorrectly validates the update field in .gitmodules, allowing attackers to bypass the CommandForbiddenInModulesConfiguration guard when a submodule has been initialized with only partial configuration in .git/config. An attacker can inject arbitrary shell commands via the update field in .gitmodules that will be executed when Submodule::update() is called on a previously-initialized submodule, enabling remote code execution.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-07-06 Last update: 2026-10-17 05:00

testing migrations

excuses:
- Migrates after: rust-gix-config, rust-gix-error, rust-gix-path, rust-gix-pathspec, rust-gix-refspec, rust-gix-url
- Migration status for rust-gix-submodule (0.34.0-1 to 0.36.0-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ rust-gix-submodule unsatisfiable Build-Depends(-Arch) on riscv64: librust-gix-config-0.62+default-dev
- ∙ ∙ rust-gix-submodule unsatisfiable Build-Depends(-Arch) on riscv64: librust-gix-error-0.5+bstr-dev
- ∙ ∙ rust-gix-submodule unsatisfiable Build-Depends(-Arch) on riscv64: librust-gix-error-0.5+default-dev
- ∙ ∙ rust-gix-submodule unsatisfiable Build-Depends(-Arch) on riscv64: librust-gix-path-0.14+default-dev
- ∙ ∙ rust-gix-submodule unsatisfiable Build-Depends(-Arch) on riscv64: librust-gix-pathspec-0.22+default-dev
- ∙ ∙ rust-gix-submodule unsatisfiable Build-Depends(-Arch) on riscv64: librust-gix-refspec-0.47+default-dev
- ∙ ∙ rust-gix-submodule unsatisfiable Build-Depends(-Arch) on riscv64: librust-gix-url-0.40+default-dev
- ∙ ∙ rust-gix-submodule unsatisfiable Build-Depends(-Arch) on s390x: librust-gix-config-0.62+default-dev
- ∙ ∙ Missing build on riscv64
- ∙ ∙ Missing build on s390x
- ∙ ∙ Autopkgtest deferred on riscv64: missing arch:riscv64 build
- ∙ ∙ Autopkgtest deferred on s390x: missing arch:s390x build
- ∙ ∙ Autopkgtest for rust-gix: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered, i386: Test triggered (failure will be ignored), ppc64el: Test triggered
- ∙ ∙ Autopkgtest for rust-gix-submodule: amd64: Test triggered, arm64: Test triggered, armhf: Test triggered, i386: Test triggered, ppc64el: Test triggered
- ∙ ∙ Lintian check waiting for test results on riscv64, s390x - info
- ∙ ∙ Too young, only 0 of 5 days old
- ∙ ∙ Build-Depends(-Arch): rust-gix-submodule rust-gix-config (not considered)
- ∙ ∙ Build-Depends(-Arch): rust-gix-submodule rust-gix-error (not considered)
- ∙ ∙ Build-Depends(-Arch): rust-gix-submodule rust-gix-path (not considered)
- ∙ ∙ Build-Depends(-Arch): rust-gix-submodule rust-gix-pathspec (not considered)
- ∙ ∙ Build-Depends(-Arch): rust-gix-submodule rust-gix-refspec (not considered)
- ∙ ∙ Build-Depends(-Arch): rust-gix-submodule rust-gix-url (not considered)
- ∙ ∙ Depends: rust-gix-submodule rust-gix-config (not considered)
- ∙ ∙ Depends: rust-gix-submodule rust-gix-error (not considered)
- ∙ ∙ Depends: rust-gix-submodule rust-gix-path (not considered)
- ∙ ∙ Depends: rust-gix-submodule rust-gix-pathspec (not considered)
- ∙ ∙ Depends: rust-gix-submodule rust-gix-refspec (not considered)
- ∙ ∙ Depends: rust-gix-submodule rust-gix-url (not considered)
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/r/rust-gix-submodule.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[rss feed]

[2026-10-16] Accepted rust-gix-submodule 0.36.0-1 (source) into unstable (Simon Quigley)
[2026-10-03] rust-gix-submodule 0.34.0-1 MIGRATED to testing (Debian testing watch)
[2026-09-18] Accepted rust-gix-submodule 0.34.0-1 (source) into unstable (Simon Quigley)
[2026-09-11] rust-gix-submodule 0.33.0-1 MIGRATED to testing (Debian testing watch)
[2026-08-24] Accepted rust-gix-submodule 0.33.0-1 (source) into unstable (Simon Quigley)
[2026-06-13] rust-gix-submodule 0.30.0-1 MIGRATED to testing (Debian testing watch)
[2026-06-04] Accepted rust-gix-submodule 0.30.0-1 (source) into unstable (Alexander Kjäll) (signed by: capitol@debian.org)
[2026-02-24] rust-gix-submodule 0.20.0-1 MIGRATED to testing (Debian testing watch)
[2026-02-14] Accepted rust-gix-submodule 0.20.0-1 (source) into unstable (Fabian Grünbichler) (signed by: Fabian Gruenbichler)
[2025-03-12] rust-gix-submodule 0.16.0-1 MIGRATED to testing (Debian testing watch)
[2025-03-07] Accepted rust-gix-submodule 0.16.0-1 (source) into unstable (Fabian Grünbichler)
[2025-02-20] rust-gix-submodule 0.15.0-1 MIGRATED to testing (Debian testing watch)
[2025-02-14] Accepted rust-gix-submodule 0.15.0-1 (source) into unstable (Fabian Grünbichler)
[2024-10-28] rust-gix-submodule 0.12.0-1 MIGRATED to testing (Debian testing watch)
[2024-10-22] Accepted rust-gix-submodule 0.12.0-1 (source) into unstable (Fabian Grünbichler)
[2024-10-13] rust-gix-submodule 0.11.0-1 MIGRATED to testing (Debian testing watch)
[2024-10-04] Accepted rust-gix-submodule 0.11.0-1 (source) into unstable (Fabian Grünbichler)
[2024-07-21] rust-gix-submodule 0.10.0-1 MIGRATED to testing (Debian testing watch)
[2024-06-14] Accepted rust-gix-submodule 0.10.0-1 (amd64 source) into unstable (Debian FTP Masters) (signed by: Fabian Gruenbichler)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 1)
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.30.0-1