Debian Patches

Status for rust-lamfold/0.1.5-1

Patch	Description	Author	Forwarded	Bugs	Origin	Last update
relax-deps.patch	relax ruzstd and zerocopy to versions currently in unstable lamfold 0.1.5 requires ruzstd 0.9.1, the release that fixes the decompression bomb in RUSTSEC-2026-0344. Unstable still has 0.8.3 (0.9.0 is staged in debcargo-conf, not uploaded). lamfold only uses ruzstd::decoding::StreamingDecoder and ruzstd::io::Read, which 0.8 has, and its test suite passes against 0.8.3. The range also takes 0.9, so this hunk keeps working when ruzstd 0.9.1 reaches unstable and can be dropped then. . lamfold declares zerocopy >=0.8.27 (the floor lzokay itself requires) but builds correctly against 0.8.26, same as lzokay's own relax-deps.patch. Drop the zerocopy hunk once zerocopy >= 0.8.27 migrates to unstable. ===================================================================	Greg Lamberson <greg@lamco.io>	not-needed			2026-10-15