• Bug#1103987: rust-crossbeam-channel: RUSTSEC-2025-0024

    From Salvatore Bonaccorso@21:1/5 to All on Wed Apr 23 17:20:01 2025
    Source: rust-crossbeam-channel
    Version: 0.5.14-1
    Severity: grave
    Tags: upstream
    Forwarded: https://github.com/crossbeam-rs/crossbeam/pull/1187
    X-Debbugs-Cc: carnil@debian.org

    Hi

    See https://rustsec.org/advisories/RUSTSEC-2025-0024.html
    | crossbeam-channel: double free on Drop

    https://github.com/crossbeam-rs/crossbeam/pull/1187

    Regards,
    Salvatore

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Wed Apr 23 18:40:01 2025
    Processing control commands:

    tags -1 + pending
    Bug #1103987 [src:rust-crossbeam-channel] rust-crossbeam-channel: RUSTSEC-2025-0024
    Added tag(s) pending.

    --
    1103987: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1103987
    Debian Bug Tracking System
    Contact owner@bugs.debian.org with problems

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Wed Apr 23 20:30:01 2025
    This is a multi-part message in MIME format...

    Your message dated Wed, 23 Apr 2025 18:17:39 +0000
    with message-id <E1u7efD-00DxIY-Pk@fasolo.debian.org>
    and subject line Bug#1103987: fixed in rust-crossbeam-channel 0.5.15-1
    has caused the Debian Bug report #1103987,
    regarding rust-crossbeam-channel: RUSTSEC-2025-0024
    to be marked as done.

    This means that you claim that the problem has been dealt with.
    If this is not the case it is now your responsibility to reopen the
    Bug report if necessary, and/or fix the problem forthwith.

    (NB: If you are a system administrator and have no idea what this
    message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org
    immediately.)


    --
    1103987: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1103987
    Debian Bug Tracking System
    Contact owner@bugs.debian.org with problems

    Received: (at submit) by bugs.debian.org; 23 Apr 2025 15:09:17 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
    (2021-04-09) on buxtehude.debian.org
    X-Spam-Level:
    X-Spam-Status: No, score=-109.4 required=4.0 tests=BAYES_00,DKIMWL_WL_HIGH,
    DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FROMDEVELOPER,SPF_HELO_NONE,
    SPF_NONE,TVD_SPACE_RATIO,UNPARSEABLE_RELAY,USER_IN_DKIM_WELCOMELIST,
    USER_IN_DKIM_WHITELIST,XMAILER_REPORTBUG autolearn=ham
    autolearn_force=no version=3.4.6-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 16; hammy, 113; neutral, 21; spammy,
    0. spammytokens:
    hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
    0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
    0.000-+--H*RT:311, 0.000-+--H*RT:108
    Return-path: <carnil@debian.org>
    Received: from stravinsky.debian.org ([2001:41b8:20