[Pkg-rust-maintainers] Bug#1128418: rust-rpm-sequoia: CVE-2026-2625

[Holger Levsen]

On Thu, Feb 19, 2026 at 03:35:32PM +0100, Salvatore Bonaccorso wrote:
> The only available reference at time of writin is [1] the bugzilla
> entry at Red Hat. A quick search in [2] has not revealed the issue
> beeing reported already, at least I was not able to find it.

thanks for this bug report, Salvatore. Upstream learned about this issue
by me telling them about this Debian bug of yours.


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

I don’t know who needs to hear this, but “I was only following orders” was
rejected as a defense at the Nuremberg Trials.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-rust-maintainers/attachments/20260219/2fa6267d/attachment.sig>