[From nobody Wed Oct 28 05:01:09 2026
Received: (at 1152227-done) by bugs.debian.org; 28 Oct 2026 04:59:14 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-112.2 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,
 FROMDEVELOPER,FVGT_m_MULTI_ODD,GMAIL,MD5_SHA1_SUM,PGPSIGNATURE,
 SPF_HELO_NONE,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 37; hammy, 150; neutral, 92; spammy,
 0. spammytokens: hammytokens:0.000-+--UD:debian.tar.xz,
 0.000-+--UD:buildinfo, 0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311
Return-path: <carnil@debian.org>
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:47674)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <carnil@debian.org>) id 1xLvko-00Dhj7-1i;
 Wed, 28 Oct 2026 04:59:13 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:In-Reply-To:Content-Transfer-Encoding:
 Content-Type:MIME-Version:References:Message-ID:Subject:Cc:To:From:Date:
 Reply-To:Content-ID:Content-Description;
 bh=NE55PfxDHvN+86EZnn+SuONUFeqO+BfXV/JAMK3yTvE=; b=XQziSCaQfJCHYaa9FP3kP+Um8r
 FtXbEfsaa/prIoSwLfGmJk1FzDVZkobI1wZq41UOPNy9ry492Ik9OzXmo6WAvJBA5yrsVRDXi8WCn
 i+DPppaNI/tpo7P2Jq7MWLkjgEayTmNvpe/1N0fxGV3ZXcxEK8N3cWFXmQM/AizlEvaa8tVrFiHK+
 Q7XxAaNQs5R619XEp2ASUjmK3SjK8xml+beLHowWFFBUIqB8Cidsd219hFXylNG3RiTF7ZLr17oWB
 oJKzTpdATyt7IUT+7J/wS8cbb7OcEf/hght9ylLMBV14VOYnttfc0VD+IB5EmIUgWo+QSGek1Hfy6
 JP8ms8AA==;
Received: from authenticated-user by stravinsky.debian.org with esmtpsa
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <carnil@debian.org>) id 1xLvkm-001zsq-08;
 Wed, 28 Oct 2026 04:59:12 +0000
Received: by eldamar.lan (Postfix, from userid 1000)
 id 3CAE7DC0379; Wed, 28 Oct 2026 05:59:11 +0100 (CET)
Date: Wed, 28 Oct 2026 05:59:11 +0100
From: Salvatore Bonaccorso <carnil@debian.org>
To: 1152227@bugs.debian.org, 1152227-done@bugs.debian.org
Cc: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>,
 Alexander =?iso-8859-1?Q?Kj=E4ll?= <alexander.kjall@gmail.com>
Subject: Re: Accepted rust-zip 9.0.5+ds-1 (source) into unstable
Message-ID: <auGBH1SSpCjG2jGm@eldamar.lan>
References: <E1xLla0-00000002ahq-0NjU@fasolo.debian.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <E1xLla0-00000002ahq-0NjU@fasolo.debian.org>
X-Debian-User: carnil

Source: rust-zip
Source-Version: 9.0.5+ds-1

Hi,

This fixes as well the recent CVEs tracked in #1152227. Closing
manually but please double-check as we..

On Tue, Oct 27, 2026 at 06:07:24PM +0000, Debian FTP Masters wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> Format: 1.8
> Date: Tue, 27 Oct 2026 18:14:56 +0100
> Source: rust-zip
> Architecture: source
> Version: 9.0.5+ds-1
> Distribution: unstable
> Urgency: medium
> Maintainer: Debian Rust Maintainers <pkg-rust-maintainers@alioth-lists.debian.net>
> Changed-By: Alexander Kjäll <alexander.kjall@gmail.com>
> Changes:
>  rust-zip (9.0.5+ds-1) unstable; urgency=medium
>  .
>    * Team upload.
>    * Package zip 9.0.5 from crates.io using debcargo 2.8.4
> Checksums-Sha1:
>  bc838495431cfc0a7d203f2f3bd0c164c066f483 3013 rust-zip_9.0.5+ds-1.dsc
>  ca4c70aab0d9143d40791c49b4ad51d3ae158675 184037 rust-zip_9.0.5+ds.orig.tar.gz
>  71006b33de5ea2a60dd57a15390552ad4f1d6299 9004 rust-zip_9.0.5+ds-1.debian.tar.xz
>  dd08eb96f1c620b3bb81d318d07b96c1440deac0 7063 rust-zip_9.0.5+ds-1_source.buildinfo
> Checksums-Sha256:
>  ef55232986b55ea703405ced8fc16dd748cfe93f5090dbbbb4cae75c1897711d 3013 rust-zip_9.0.5+ds-1.dsc
>  6e04976da629d3b04204ba8105b396a193af8ad2583b2c79bfb3ab8af580a11e 184037 rust-zip_9.0.5+ds.orig.tar.gz
>  d5000e3f674c798fe323fa9468e3a8be15067121b459910781469e4d6c82ce24 9004 rust-zip_9.0.5+ds-1.debian.tar.xz
>  de764d76de3d2d03d0e83b6caabef37fc8ed4b3bbac174e18124045f973b365c 7063 rust-zip_9.0.5+ds-1_source.buildinfo
> Files:
>  abb3a5377827dd225c562f7ce02f66d4 3013 rust optional rust-zip_9.0.5+ds-1.dsc
>  c2ca6ae9622ebb453169b63d1b781acf 184037 rust optional rust-zip_9.0.5+ds.orig.tar.gz
>  2c133345f15c397c15da9284424d2151 9004 rust optional rust-zip_9.0.5+ds-1.debian.tar.xz
>  38cc9829ba4480848b38e08afe4e45d1 7063 rust optional rust-zip_9.0.5+ds-1_source.buildinfo
> 
> -----BEGIN PGP SIGNATURE-----
> 
> iHUEARYKAB0WIQTjXSWUWAMcT4Fcz+oDR6wEe1CAhQUCauDcEwAKCRADR6wEe1CA
> heV1AP0aJYLT7PYxRpKZKqNeoSvkI6ElBC6Y7MxgAxItQc1imgD+Pu02z6SUeNgb
> 2/9oUzXyTyuXYCkvKzYRfeXSGlb67Ak=
> =07VF
> -----END PGP SIGNATURE-----

Regards,
Salvatore]