Debian Patches

Status for rust-lambutter/0.5.0-1

Patch Description Author Forwarded Bugs Origin Last update
relax-deps.patch relax ruzstd to the version currently in unstable lambutter 0.5.0 requires ruzstd 0.9.1, the release that fixes the
decompression bomb in RUSTSEC-2026-0344. Unstable still has 0.8.3 (0.9.0 is
staged in debcargo-conf, not uploaded). lambutter only uses
ruzstd::decoding::StreamingDecoder and ruzstd::io::Read, which 0.8 has, and
its tests pass against 0.8.3. The range also takes 0.9, so the patch keeps
working when ruzstd 0.9.1 reaches unstable and can be dropped then.

===================================================================
Greg Lamberson <greg@lamco.io> not-needed 2026-10-15

All known versions for source package 'rust-lambutter'

Links