[Pkg-rust-maintainers] Bug#969839: rust-failure: type confusion when downcasting, which is an undefined behavior

[Alexander Kjäll]

Source: rust-failure
Severity: normal
Tags: upstream

Dear Maintainer,

Security problem reported upstream: https://rustsec.org/advisories/RUSTSEC-2019-0036.html

And the project is eol without a fix: https://rustsec.org/advisories/RUSTSEC-2020-0036.html

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.6.0-2-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=locale: Cannot set LC_ALL to default locale: No such file or directory
UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled