Debian Patches

Status for rust-lamxfs/0.1.3-1

Patch Description Author Forwarded Bugs Origin Last update
relax-deps.patch relax the ruzstd dev-dependency to the version in unstable lamxfs 0.1.3's tests require ruzstd 0.9.1, the release that fixes the
decompression bomb in RUSTSEC-2026-0344. Unstable still has 0.8.3 (0.9.0 is
staged in debcargo-conf, not uploaded). ruzstd is only a dev-dependency here,
used through ruzstd::decoding::StreamingDecoder, which 0.8 has, and the unit
tests pass against 0.8.3. The range also takes 0.9, so the patch keeps
working when ruzstd 0.9.1 reaches unstable and can be dropped then.

===================================================================
Greg Lamberson <greg@lamco.io> not-needed 2026-10-15

All known versions for source package 'rust-lamxfs'

Links