[From nobody Sat May 23 22:17:08 2026 Received: (at 1137328-close) by bugs.debian.org; 23 May 2026 21:16:11 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 85; hammy, 150; neutral, 136; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:43736) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQthb-000mt9-0c for 1137328-close@bugs.debian.org; Sat, 23 May 2026 21:16:11 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wQtha-000NZy-0M for 1137328-close@bugs.debian.org; Sat, 23 May 2026 21:16:10 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=7Yht8rWy9+LwfOE6n1vef5Ci1it/ZGWOt21vtCE1E6g=; b=BxKcm2cIuvDwDVj8hvUJlsGP/R VUSij8/B/6VdmZoQMYRrhpESH25CYNEdIQz+fLRyLlPgn63RQbSpYnJTVDkWl5Y4SQ4EFlhlrqeez RqLS4SKwWAvVDmNajuqeGMxJH+ugla1VRpc/CCSvp9buR5afIj6K91wyTA7Vog/SSD8qFzwSf86zL 7/IvgflVB9QTlqVBbT32xvxLEefJW93q6aZmdgIepSG0/BJX23PUKS52lUNJ5rMduw64lRJLGVcgs C8E/BrhkU8KhqBRAKOKOh2ZKV+TEmf5GAt8E9cha2yaHk/ZsHrp0pLUjjW0puDxbPUp1C+PheCK1K O6dgwcfA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wQthY-0000000DMYU-3y9s; Sat, 23 May 2026 21:16:08 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Holger Levsen <holger@debian.org> To: 1137328-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: rust-sequoia-openpgp Debian: DAK Debian-Changes: rust-sequoia-openpgp_2.2.0-2_source.changes Debian-Source: rust-sequoia-openpgp Debian-Version: 2.2.0-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1137328: fixed in rust-sequoia-openpgp 2.2.0-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============6029877158906278292==" Message-Id: <E1wQthY-0000000DMYU-3y9s@fasolo.debian.org> Date: Sat, 23 May 2026 21:16:08 +0000 --===============6029877158906278292== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: rust-sequoia-openpgp Source-Version: 2.2.0-2 Done: Holger Levsen <holger@debian.org> We believe that the bug you reported is fixed in the latest version of rust-sequoia-openpgp, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1137328@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Holger Levsen <holger@debian.org> (supplier of updated rust-sequoia-openpgp p= ackage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 23 May 2026 21:57:47 +0200 Source: rust-sequoia-openpgp Architecture: source Version: 2.2.0-2 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian= .net> Changed-By: Holger Levsen <holger@debian.org> Closes: 1137326 1137328 Changes: rust-sequoia-openpgp (2.2.0-2) unstable; urgency=3Dmedium . * Package sequoia-openpgp 2.2.0 from crates.io using debcargo 2.8.2 * Add 0001-openpgp-Reject-nested-embedded-signatures.patch for CVE-2026-42783. Closes: #1137326. * Add 0002-openpgp-Don-t-imply-missing-key-flags-from-key-type.patch for CVE-2026-42784. Closes: #1137328. Checksums-Sha1: abb75141f16edd78fac66f7d21cc1a159fa1775d 3668 rust-sequoia-openpgp_2.2.0-2.d= sc 4932c6a76521c2285c5b841cdae385ee9059494e 16436 rust-sequoia-openpgp_2.2.0-2.= debian.tar.xz ce241590080a7986c655d3946fac6c9205dab554 7554 rust-sequoia-openpgp_2.2.0-2_s= ource.buildinfo Checksums-Sha256: e674a7454214bc7ed9a25d0f67c7370a14a48675c74fae01267b44589cf002eb 3668 rust-s= equoia-openpgp_2.2.0-2.dsc e2825d5e31cf43e695a7f80fefc67f78dc707224058427350dcd7a523dda6570 16436 rust-= sequoia-openpgp_2.2.0-2.debian.tar.xz b9e49334f73f765d4d2710a086f3af16b22789d8fae2a75b1f1bddc11ad80361 7554 rust-s= equoia-openpgp_2.2.0-2_source.buildinfo Files: 2af2f1a2a418c23c43d99ebd37f307cc 3668 rust optional rust-sequoia-openpgp_2.2= .0-2.dsc 2fd6e8839477ad7d09224e0c9c424bbd 16436 rust optional rust-sequoia-openpgp_2.= 2.0-2.debian.tar.xz 3f8a636cda8b8666f59778b825243028 7554 rust optional rust-sequoia-openpgp_2.2= .0-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmoSBsoSHGhvbGdlckBk ZWJpYW4ub3JnAAoJEAkauFYGmqocSLsQAJq8e5fMBR1WyaMG7NlhS3FO1mWZ1bm2 Ut0CHEJ3TLTqnjPzeX+VnMSpzzmGNXeKygmQOX9qNeeCghho9B+qFbXiSulqvHEr 1tEUp7YjD1wNW9iYWo8pXcA4O3LopLX8efnCPT3vYp/h9aK/0YkxLpc9AG9HjCxS b3BYbN5GDp0jqNw9Fkty8CvT0tOm7xSXzoQq//p8ybT02avUkdXpaGZnrDKeX843 oIzvTARa0ovxFX3tSfNRW7ZIDWOS30cCVWDM/tayKK4nnM1EJhSMTeT5K9Q0h3pF 54u9gz08I2DXa9HN4xizKdDagDe0aDSduuyUfdcCnC3lw6vOLtsS/TiIiVO/vkSG cKZk1V0IVl7CVsERTBy9Okdz7ciMlTJWcxdr0ZDtVuluq9LmBMhFeW4RbEQrZdQF uW+ocO3mefpTI5jh7bpGt9AnYCsGC/OyI2mwnUG/ViGvAGysVmIbzkcpiGkKbm9o oQwhpxFbtP9eN6MX14hf10a2sOpHcTJKyiHTCfU4q8vlvzl6auVorp/OYxo4gIwV bUNaV+hjgUMzmAn2nwzWW1DyBo3HrwXxthlL2A8ab8xMWShwOMDOHEdqNJO13rZX OeWw5mMx4CYTvr6OcZF9875y2ahp//FWOb9/iBw5JM8SNk+IEPj3vOTAE5MZykzm s2+oWDGbBH66 =3DfioC -----END PGP SIGNATURE----- --===============6029877158906278292== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCahIZGAAKCRCb9qggYcy5 IZjxAQD43PnWSjAb1CBylGr8A4zdeL4N+eqEZOUJ/FIK9oGQrwEA8cItexUPVnZM +pA8yZQ8+jEQmqp+EhZmuIJ8eeuZSA8= =/0fy -----END PGP SIGNATURE----- --===============6029877158906278292==-- ]