rust-http - Debian Package Tracker

Problems while searching for a new upstream version high

uscan had problems while searching for a new upstream version:

unrecognized option \\nuversionmangle=s/(\d)[_\.\-\+]?((RC|rc|pre|dev|beta|alpha)\d*)$/$1~$2/

Created: 2021-03-08 Last update: 2021-04-12 04:32

1 security issue in sid high

1 important issue:

CVE-2019-25009: An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.

Created: 2021-02-19 Last update: 2021-03-23 21:46

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2019-25009: An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.

Created: 2021-02-19 Last update: 2021-03-23 21:46

2 low-priority security issues in buster low

2 issues left for the package maintainer to handle:

CVE-2019-25009: (needs triaging) An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.
CVE-2020-25574: (needs triaging) An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve() could result in denial of service (e.g., an infinite loop).

You can find information about how to handle these issues in the security team's documentation.

Created: 2021-02-19 Last update: 2021-03-23 21:46

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2018-10-17 Last update: 2018-10-17 22:31

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.1 instead of 4.5.0).

Created: 2018-10-17 Last update: 2021-03-08 12:36