[From nobody Tue May 26 21:35:07 2026
Received: (at submit) by bugs.debian.org; 19 Feb 2026 11:12:13 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-16.2 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,
 DKIM_VALID_EF,FREEMAIL_FROM,HAS_PACKAGE,MD5_SHA1_SUM,
 RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,
 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,
 RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_PASS,SPF_PASS autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 24; hammy, 114; neutral, 24; spammy,
 1. spammytokens:0.895-+--H*MI:JavaMail hammytokens:0.000-+--trixie,
 0.000-+--HTo:N*Debian, 0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking,
 0.000-+--HTo:N*Bug
Return-path: <ydirson@free.fr>
Received: from smtp1-g21.free.fr ([212.27.42.1]:28790)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <ydirson@free.fr>) id 1vt1x6-005Ip0-2w
 for submit@bugs.debian.org; Thu, 19 Feb 2026 11:12:13 +0000
Received: from zimbra39-e7.priv.proxad.net (unknown [172.20.243.189])
 by smtp1-g21.free.fr (Postfix) with ESMTP id 950A4B0054C
 for <submit@bugs.debian.org>; Thu, 19 Feb 2026 12:12:03 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=free.fr;
 s=smtp-20201208; t=1771499523;
 bh=F8OxKtNbep7vK42sHTyb4HTCX9p15KYY2uh9BhHC+BM=;
 h=Date:From:To:In-Reply-To:Subject:From;
 b=iIZSpi0SFBlPwJXJS8FY5jj62vWmsFU+ir9iqxYeDoba0e5VFWu4eGwGzz9uNEpUu
 b/34kH53T53QKsxzn6wNjB1s8GifCBZU258AnwRa8A36hk2l7YOuW6H/qLOm0zNZhN
 o309Y+6w7t13XlngKXEKf456lZ+QnUYNWMMCORGSaYkzLdBtTNn8kOUjoIaD0N7lV8
 K7GBP2bIALZcTU55kMfq3oPM8LrJFvcYeSGrP0DwEtFRRcIKIaJpATg67dn1pJD4GE
 reRQTxcFtKGBxtz0rVGM1qwBRhjNzbCTHA19VsQyaHq0D/qY7jq3qVZvS2u9HGifOh
 f/+l+tjG2Nf+g==
Date: Thu, 19 Feb 2026 12:12:03 +0100 (CET)
From: Yann Dirson <ydirson@free.fr>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Message-ID: <1855418686.1587197923.1771499523575.JavaMail.root@zimbra39-e7.priv.proxad.net>
In-Reply-To: <1206221187.1587129312.1771498836824.JavaMail.root@zimbra39-e7.priv.proxad.net>
Subject: rust-time: last upstream fixes a security issue impacting trixie
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Originating-IP: [88.120.44.86]
X-Mailer: Zimbra 7.2.0-GA2598 (ZimbraWebClient - FF3.0 (Linux)/7.2.0-GA2598)
X-Authenticated-User: ydirson@free.fr
Delivered-To: submit@bugs.debian.org

Package: rust-time
Version: 0.3.37-1
Tags: trixie security fixed-upstream

Upstream changelog[1] for 0.3.47 include a Security issue.
This can be tracked to commit 1c63dc7985b8fa26bd8c689423cc56b7a03841ee.
All lines modified by this commit were introduced in commit
e44875d26490edecaf6cdd5dfacc310916c76adb, included in 0.3.6, so I
believe 0.3.37 to be impacted.

It is the only security issue currently mentioned post-0.3.37 in their
changelog.


[1] https://github.com/time-rs/time/blob/main/CHANGELOG.md
]