[Pkg-rust-maintainers] Bug#1051808: Bug#1051808: rust-users: RUSTSEC-2023-0059

[Peter Green]

> rust-users is currently unmaintained upstream.
> 
> In a fork a proposed patch can be found.
> 
> What is the rust-users situation with respect of Debian as it is
> unmantained upstream?

So we have two options, patch it or move away from it to a fork

The crate "uzers" which is a fork of this crate was recently
uploaded to Debian and I have just uploaded version 0.11.3 of
it. I believe that said version includes a fix for this issue.

Uzers is listed as an alternative on the rustsec entry, but at
least so-far there doesn't seem to have been a whole lot of uptake.
crates.io only lists one reverse dependency of said fork, which
is itself a fork of exa.