[Pkg-rust-maintainers] Bug#1101334: Mimalloc < v0.1.39 Can Allocate Memory with Bad Alignment

[Jonas Smedegaard]

Source: rust-mimalloc
Version: 0.1.29-1
Severity: serious
Tags: security upstream
X-Debbugs-Cc: Debian Security Team <team at security.debian.org>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Rust crate mimalloc lower than 0.1.39 is considered unsound and has
been pulled upstream: https://rustsec.org/advisories/RUSTSEC-2022-0094

 - Jonas

- -- System Information:
Debian Release: trixie/sid
  APT prefers buildd-unstable
  APT policy: (500, 'buildd-unstable'), (500, 'unstable'), (1, 'buildd-experimental'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.9.10-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled


-----BEGIN PGP SIGNATURE-----
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=akPg
-----END PGP SIGNATURE-----