Debian Package Tracker

general

source: rustc (main)
version: 1.36.0+dfsg1-2
maintainer: Debian Rust Maintainers (archive) [DMD]
uploaders: Sylvestre Ledru [DMD] – Ximin Luo [DMD]
arch: all any
std-ver: 4.2.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-sec: 1.24.1+dfsg1-1~deb8u4
oldstable: 1.24.1+dfsg1-1~deb9u4
stable: 1.34.2+dfsg1-1
testing: 1.34.2+dfsg1-1
unstable: 1.36.0+dfsg1-2

versioned links

1.14.0+dfsg1-3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.24.1+dfsg1-1~deb8u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.24.1+dfsg1-1~deb9u4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.34.2+dfsg1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.35.0+dfsg1-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.36.0+dfsg1-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libstd-rust-1.36
libstd-rust-dev
rust-doc (5 bugs: 1, 3, 1, 0)
rust-gdb
rust-lldb
rust-src (1 bugs: 0, 1, 0, 0)
rustc (4 bugs: 0, 2, 2, 0)

action needed

2 security issues in jessie high

There are 2 open security issues in jessie.

1 important issue:

CVE-2019-1010299: The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.

1 issue skipped by the security teams:

CVE-2018-1000622: The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Please fix them.

Created: 2018-11-07 Last update: 2019-07-20 08:51

2 security issues in stretch high

There are 2 open security issues in stretch.

1 important issue:

CVE-2019-1010299: The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug printing for iterator over an empty VecDeque. The fixed version is: 1.30.0, nightly versions after commit b85e4cc8fadaabd41da5b9645c08c68b8f89908d.

1 issue skipped by the security teams:

CVE-2018-1000622: The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Please fix them.

Created: 2018-07-10 Last update: 2019-07-20 08:51

lintian reports 1 warning high

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2019-07-15 Last update: 2019-07-18 04:51

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2019-06-16 Last update: 2019-07-21 08:10

Fails to build during reproducibility testing normal

A package building reproducibly enables third parties to verify that the source matches the distributed binaries. It has been identified that this source package produced different results, failed to build or had other issues in a test environment. Please read about how to improve the situation!

Created: 2019-06-21 Last update: 2019-07-21 02:31

Multiarch hinter reports 1 issue(s) low

There are issues with the multiarch metadata for this package.

rust-src could be marked Multi-Arch: foreign

Created: 2017-01-10 Last update: 2019-07-21 02:33

Build log checks report 2 warnings low

Build log checks report 2 warnings

Created: 2019-03-18 Last update: 2019-07-14 04:33

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.0 instead of 4.2.1).

Created: 2018-12-23 Last update: 2019-07-18 07:38

testing migrations

excuses:
- Migrates after: llvm-toolchain-8
- Too young, only 3 of 5 days old
- rust-lldb/s390x unsatisfiable Depends: lldb-8
- rust-lldb/s390x unsatisfiable Depends: python-lldb-8
- Piuparts tested OK - https://piuparts.debian.org/sid/source/r/rustc.html
- Not built on buildd: arch mips binaries uploaded by infinity0
- Not built on buildd: arch mipsel binaries uploaded by infinity0
- Not considered

news

[rss feed]

[2019-07-18] Accepted rustc 1.36.0+dfsg1-2 (source) into unstable (Ximin Luo)
[2019-07-17] Accepted rustc 1.36.0+dfsg1-1 (source) into unstable (Ximin Luo)
[2019-07-16] Accepted rustc 1.36.0+dfsg1-1~exp1 (mips all source) into experimental, experimental (Ximin Luo)
[2019-07-13] Accepted rustc 1.35.0+dfsg1-1 (source) into unstable (Ximin Luo)
[2019-07-10] Accepted rustc 1.35.0+dfsg1-1~exp1 (mips all source) into experimental, experimental (Ximin Luo)
[2019-06-20] rustc 1.34.2+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2019-05-30] Accepted rustc 1.34.2+dfsg1-1 (source) into unstable (Ximin Luo)
[2019-05-25] Accepted rustc 1.34.2+dfsg1-1~exp2 (source) into experimental (Ximin Luo)
[2019-05-23] Accepted rustc 1.34.2+dfsg1-1~exp1 (i386 source) into experimental, experimental (Ximin Luo)
[2019-05-18] Accepted rustc 1.33.0+dfsg1-2 (source) into unstable (Ximin Luo)
[2019-05-18] Accepted rustc 1.33.0+dfsg1-1 (source) into unstable (Ximin Luo)
[2019-05-17] Accepted rustc 1.33.0+dfsg1-1~exp1 (i386 all source) into experimental, experimental (Ximin Luo)
[2019-04-05] rustc 1.32.0+dfsg1-3 MIGRATED to testing (Debian testing watch)
[2019-03-18] Accepted rustc 1.32.0+dfsg1-3 (source) into unstable (Ximin Luo)
[2019-03-17] Accepted rustc 1.32.0+dfsg1-2 (source) into unstable (Ximin Luo)
[2019-02-02] rustc 1.32.0+dfsg1-1 MIGRATED to testing (Debian testing watch)
[2019-01-28] Accepted rustc 1.32.0+dfsg1-1 (mips all source) into unstable (Ximin Luo)
[2019-01-02] Accepted rustc 1.32.0~beta.2+dfsg1-1~exp2 (source) into experimental (Ximin Luo)
[2018-12-28] rustc 1.31.0+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2018-12-18] Accepted rustc 1.24.1+dfsg1-1~deb8u4 (source amd64 all) into oldstable (Emilio Pozuelo Monfort)
[2018-12-17] Accepted rustc 1.32.0~beta.2+dfsg1-1~exp1 (amd64 all source) into experimental, experimental (Ximin Luo)
[2018-12-16] Accepted rustc 1.31.0+dfsg1-2 (source) into unstable (Ximin Luo)
[2018-12-16] Accepted rustc 1.31.0+dfsg1-1 (source) into unstable (Ximin Luo)
[2018-12-15] Accepted rustc 1.31.0+dfsg1-1~exp2 (source) into experimental (Ximin Luo)
[2018-12-15] Accepted rustc 1.31.0+dfsg1-1~exp1 (source) into experimental (Ximin Luo)
[2018-12-01] Accepted rustc 1.31.0~beta.19+dfsg1-1~exp2 (source) into experimental (Ximin Luo)
[2018-11-30] Accepted rustc 1.31.0~beta.19+dfsg1-1~exp1 (source) into experimental (Ximin Luo)
[2018-11-18] rustc 1.30.0+dfsg1-2 MIGRATED to testing (Debian testing watch)
[2018-11-16] Accepted rustc 1.24.1+dfsg1-1~deb8u3 (source amd64 all) into oldstable (Emilio Pozuelo Monfort)
[2018-11-14] Accepted rustc 1.24.1+dfsg1-1~deb8u2 (source amd64 all) into oldstable (Emilio Pozuelo Monfort)

bugs [bug history graph]

all: 12
RC: 1
I&N: 7
M&W: 4
F&P: 0
patch: 1

links

homepage
lintian (0, 1)
buildd: logs, checks, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
screenshots

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.35.0+dfsg0.1+llvm-0ubuntu1
6 bugs
patches for 1.35.0+dfsg0.1+llvm-0ubuntu1