rust-rsa - Debian Package Tracker

A new upstream version is available: 0.10.0~pre.4 high

A new upstream version 0.10.0~pre.4 is available, you should consider packaging it.

Created: 2023-10-30 Last update: 2025-05-28 23:28

1 security issue in sid high

1 important issue:

CVE-2023-49092: RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information about the private key is leaked through timing information which is observable over the network. An attacker may be able to use that information to recover the key. There is currently no fix available. As a workaround, avoid using the RSA crate in settings where attackers are able to observe timing information, e.g. local use on a non-compromised computer.

Created: 2023-11-29 Last update: 2025-04-22 17:00

debian/patches: 1 patch to forward upstream low

Among the 1 debian patch available in version 0.9.7-1 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-09-20 Last update: 2024-12-06 10:02

Build log checks report 1 warning low

Build log checks report 1 warning

Created: 2023-09-20 Last update: 2023-09-20 02:41

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.2 instead of 4.7.0).

Created: 2025-02-21 Last update: 2025-02-27 13:24