[Pkg-rust-maintainers] Bug#1050299: rust-webpki: RUSTSEC-2023-0052

[Salvatore Bonaccorso]

Source: rust-webpki
Version: 0.22.0-2
Severity: grave
Tags: security upstream
Justification: user security hole
X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>

Hi

Please see https://rustsec.org/advisories/RUSTSEC-2023-0052.html .

FWIW, there is a fix in the rustls-webpki is a fork, which is actively
maintained.

Should rust-webpki be removed from Debian testing and unstable?

Regards,
Salvatore