rust-thin-vec - Debian Package Tracker

10 open merge requests in Salsa normal

There are 10 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2026-10-04 Last update: 2026-10-26 09:20

1 low-priority security issue in trixie low

1 issue left for the package maintainer to handle:

CVE-2026-6654: (needs triaging) Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-04-20 Last update: 2026-10-30 00:30

debian/patches: 1 patch to forward upstream low

Among the 2 debian patches available in version 0.2.21-1 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2024-02-13 Last update: 2026-10-26 14:30