There are 4 open security issues in trixie.
You can find information about how to handle these issues in the security team's documentation.
There are 2 open security issues in forky.
There are 15 open security issues in bullseye.
There are 4 open security issues in bookworm.
You can find information about how to handle these issues in the security team's documentation.
Among the 53 debian patches available in version 1.95.0+dfsg1-2 of the package, we noticed the following issues:
commit a3968e40bdedeed8d7670660299a414a13607504
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Thu May 28 20:59:08 2026 +0200
bump version to 1.95.0+dfsg1-2
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit 665b10c9bb06cf1b4275b66e0f0d3beca97bc2c8
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Thu May 28 20:57:14 2026 +0200
cherry-pick fixes for CVE-2026-5222 and CVE-2026-5223
from 1.96
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit 1f4a2465e4c90413fdcc0b91235f2b1fc018300e
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Tue May 19 14:51:38 2026 +0200
d/control: drop libonig-dev
no longer used by rustbook
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit a7c7b83f593e3d5e1c6d3c342e0b8a6bfad71760
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Thu May 14 19:14:35 2026 +0200
bump version to 1.95.0+dfsg1-1
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit 361ca419eba7515b0e9a1bbf7ef1ff3609e12b89
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Thu May 14 19:13:45 2026 +0200
update lintian overrides
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit 49625e09436e6fe8f552e5d8d184fb5f9ba51a57
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Thu May 14 19:10:08 2026 +0200
update d/copyright
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit 42bca7d4f8daba908a500857211d845676145d9b
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Wed May 13 19:09:57 2026 +0200
wit-bindgen: update version
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit a634abd45b8f6f275b9265a8f04fe52d8b6abebb
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Tue May 5 16:52:41 2026 +0200
add autopkgtest for -Zbuild-std
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit 689c3041b6beea853b0f174f076981179bae635a
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Tue May 5 16:52:21 2026 +0200
rust-src: install std/core/alloc vendored dependencies
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit 2d682c70e2b675eaf8eb8a0ac343c340739fff9b
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Wed May 13 14:26:27 2026 +0200
update version to 1.95.1
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit 6e4f75e01dd90929ae527b1d66fb4fd3cbaeeafd
Merge: 2fd08ba589 20375db118
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Thu May 14 11:51:10 2026 +0200
Update upstream source from tag 'upstream/1.95.0+dfsg1'
Update to upstream version '1.95.0+dfsg1'
with Debian dir fb97474da08c473b717fca61a9bd60b95cb9a5fb
commit 2fd08ba5898638b983c0a4e94b742bd5f01bc128
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Thu May 14 11:04:48 2026 +0200
do not prune libc 0.2.178
it is needed for build-std, which uses the stock Cargo.lock file.
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit 0470d1509bb113a793bee44010f5aa17107a3f00
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Sat Apr 18 14:56:28 2026 +0200
update upstream unsuspicious files
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit 6e68d0d77232d6bb039b676257b0f93d769fbec5
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Thu Apr 16 16:20:08 2026 +0200
Update Files-Excluded for new upstream version 1.95.0
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit 1658cc7e815dd8c56a4d09c8853914028f68bf72
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Thu Apr 16 16:18:20 2026 +0200
early-stage update of patches for 1.95.0+dfsg1
commit 893624ab16e8a4cac7114c82957e98f35238fd9b
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Thu Apr 16 10:09:56 2026 +0200
bump version to 1.94.1+dfsg1-1
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit 7f5949335334503818398513f5e5ca0eedad76c5
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Tue Apr 14 09:26:04 2026 +0200
bump version to 1.94.1+dfsg1-1~exp3
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit ef209d5e740197cafbbabbfdfba14cb9f44315b0
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Tue Apr 14 09:25:30 2026 +0200
tests: also skip rust-analyzer tests on hurd
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit d4f677d280aa56066b04166de384ce3810fbfe62
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Mon Apr 13 14:26:50 2026 +0200
bump version to 1.94.1+dfsg1-1~exp2
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit 9cd839b5b273b1d4b91a106a0834ea84f75235e8
Author: Fabian Grünbichler <debian@fabian.gruenbichler.email>
Date: Mon Apr 13 14:25:48 2026 +0200
skip rust-analyzer tests on most architectures
the test suite is only tested on the major ones.
Signed-off-by: Fabian Grünbichler <debian@fabian.gruenbichler.email>
commit b9622a6a6004429084f1c990c50829354a010b30
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Fri Apr 10 09:15:32 2026 +0200
bump version to 1.94.1+dfsg1-1~exp1
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 4822d94cbc62c1ed2d58027495e0b4956d3f0558
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Fri Apr 10 10:50:39 2026 +0200
d/rules: improve doc badge replacement
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 3dbd924806bf71addb05f1ada56da8f3fc5c0e93
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Fri Apr 10 08:40:59 2026 +0200
update lintian overrides
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit c9d26dee0a9d7528ae65c76856fded608efa22b3
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Fri Apr 10 08:40:49 2026 +0200
update d/copyright
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 6faf6baa841bc191d7639fe03724efe5d786cda8
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Fri Apr 10 09:14:04 2026 +0200
add patch to skip test that requires pruned path
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 2b558f030301513e35077ac5fbb55e28ff493674
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Thu Apr 9 16:28:46 2026 +0200
fix expected debuginfo paths in ui tests
fallout from https://github.com/rust-lang/rust/pull/149709/ and fix for one
long-standing failing test..
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit c862739f5c630a74f217a9582f5a144d96a0cbfb
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Thu Apr 9 15:13:34 2026 +0200
fix mdbook patches
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit dc94d89269ef8b2871b83669dd5083520baba270
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Thu Apr 9 13:45:18 2026 +0200
regenerate font-awesome-as-a-crate from packaged version
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 21c64db7d9a3736fb4e4523f38cb455f473701f6
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Thu Apr 9 12:53:55 2026 +0200
update version to 1.94.1
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 5c5ee92cf74134b6ec373dce8d1ede5d78bad316
Merge: 4c645b5cbf aa4d007e55
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Thu Apr 9 12:50:21 2026 +0200
Update upstream source from tag 'upstream/1.94.1+dfsg1'
Update to upstream version '1.94.1+dfsg1'
with Debian dir efc35669377d66539714d4d685b466086f60e74f
commit 4c645b5cbf76cb8ef4d50e6120f6de7d60c3c074
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Thu Apr 9 11:12:14 2026 +0200
exclude CodeView.pdf with unclear license
and drop link referencing it from docs for now.
See github.com/rust-lang/rustc-dev-guide/issues/2828
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 2c20966f12b2bcfa15d6a932ce217f446d335be4
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Wed Apr 8 13:28:08 2026 +0200
update unsuspicious files for 1.94.1
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 65bf4040a582d471658edc4629213553be181b24
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Wed Apr 8 13:30:26 2026 +0200
remove sqlite-wasm-rs
sqlite3 is only used for cargo, and cargo can't be built for
wasm32-unknown-unknown anyway..
commit 2a8ea1284c9fd4e19edfc1c1b65ac1ef65e52b09
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Wed Apr 8 11:41:07 2026 +0200
Update Files-Excluded for new upstream version 1.94.1
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 38370e66be4297dc891b9c6bb86a043bdb3bf5f3
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Wed Apr 8 11:37:56 2026 +0200
early-stage update of patches for 1.94.1+dfsg1
commit 557e40f038f158c2c4700b21171b472e05506240
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Wed Apr 8 19:02:14 2026 +0200
bump version to 1.93.1+dfsg1-2
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit ecccf9bc5d29415f532bdf33ed3b7828c359912a
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Wed Apr 8 19:01:46 2026 +0200
doc: fix cargo book reference
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit c6b0308b741c91f397303530d2f0efe4976d89f1
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Tue Apr 7 13:42:07 2026 +0200
bump version to 1.93.1+dfsg1-1
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 746518a622ffd512387bddebc5b5ff0439bee13a
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Tue Apr 7 17:50:56 2026 +0200
build: disable clang-rt on armel
it's disabled in LLVM 21+ because of lack of upstream support.
Suggested-by: Adrian Bunk <bunk@debian.org>
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit e0d26ac578286a7672fc5e91587db45a1b6b6451
Merge: 3088e0c044 be8bb5b6d5
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Tue Apr 7 13:21:20 2026 +0200
Merge branch 'debian/experimental' into debian/sid
commit be8bb5b6d5f5f7b08dd6c490fdba920fcb537eb8
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Thu Mar 26 11:26:58 2026 +0100
backport tar CVE-2026-33055/CVE-2026-33056 fixes
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 3088e0c0448163b70b231c258e1066fa0ce20471
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Thu Mar 26 11:28:49 2026 +0100
bump version to 1.92.0+dfsg1-2
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 539c26199f2e384bfc89e40f61b68ca11ea255f3
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Thu Mar 26 11:26:58 2026 +0100
backport tar CVE-2026-33055/CVE-2026-33056 fixes
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 99c7d79707414aed2ceea189d7d09c0be13b0193
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Tue Mar 10 14:28:21 2026 +0100
bump version to 1.93.1+dfsg1-1~exp1
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 72bb7f90f32517ddb7fb14dfed0a5c0183c134b9
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Tue Mar 10 13:37:57 2026 +0100
d/rules: de-duplicate lists of workspaces
to avoid them going out of sync, causing different handling in configure and
clean steps.
Closes: #1048141
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit d0743c2bfbc226acee143ba712f6b7d5b3c81c49
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Tue Mar 10 10:28:32 2026 +0100
update d/copyright
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit b224849e67c947ae8f26f59e1fd5ef72d05e43c4
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Mon Mar 9 15:08:08 2026 +0100
bootstrap: drop RemoteTestClientTests
since the RemoteTestClient is stripped as part of pruning.
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit a8fbf5470307427eab37bbc5c4b450285b134c68
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Mon Mar 9 14:06:02 2026 +0100
build-wit-bindgen: call twice for both versions
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 6b49f96aa9db0694d4a505e63db1595ed7e6e73e
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Mon Mar 9 13:30:07 2026 +0100
update version to 1.93.1
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 0edcb3810989c614566f5367a7442b50e33ad30d
Merge: 4d5cb577dc a010051f50
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Mon Mar 9 13:28:48 2026 +0100
Update upstream source from tag 'upstream/1.93.1+dfsg1'
Update to upstream version '1.93.1+dfsg1'
with Debian dir a41388677b38b2c628a2bc1ceaceef3f69ee268a
commit 4d5cb577dc67616fcf148d7c45ae737103bdd1fd
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Mon Mar 9 12:00:14 2026 +0100
update unsuspicious files
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit 4595b7042970052b1776b1c31e9b1dd14d16c9a6
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Sun Mar 8 11:12:07 2026 +0100
bump version to 1.92.0+dfsg1-1
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit f1b1725527e4fcb5088d7d7025c338a1f17a0b22
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Sat Feb 14 21:47:20 2026 +0100
d/rules: fix clean target
building twice in a row regressed, thanks to Santiago for the patch!
Closes: #1048141
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit 31492ae6e7a1ca54381d12c66ac9c0adc191888e
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Sun Feb 8 22:33:49 2026 +0100
d/tests/control: fix typo
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit 558dfb364268be2b26e069bba448becaec432b83
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Sun Feb 8 19:38:55 2026 +0100
autopkgtests: split download from build test
to comply with the policy of not executing code downloaded from the internet.
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit 44242675d1f99a4e184498a80e6c6cd5b17b8582
Author: Fabian Grünbichler <git@fabian.gruenbichler.email>
Date: Fri Jan 23 17:54:40 2026 +0100
bump version to 1.92.0+dfsg1-1~exp1
Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
commit 851add4807742e073e45f0a07552977bfe896c7f
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Fri Jan 23 11:35:28 2026 +0100
cargo wrapper: also handle cargo-c commands
but with special care - cargo-c currently does not emit a multi-arch compatible
lib dir if an explicit target is passed. while this can/will be fixed, which
will fix cross-builds involving cargo-c, the wrapper will continue to not pass
an explicit target for non-cross invocations to avoid breaking native builds
with older/unfixed cargo-c versions.
cross-builds require passing an explicit target, so they can only work with a
fixed cargo-c version anyway..
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
commit c2ab39cbc034390e8c2eff9a4625dd71847e1399
Author: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Date: Fri Jan 23 11:31:39 2026 +0100
update d/copyright
Gbp-Dch: ignore
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.
Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.