On 2021-05-21 21:37:32 +0200, Moritz Muehlenhoff wrote:
> Source: rust-http
> Severity: grave
> Tags: security
> X-Debbugs-Cc: Debian Security Team <t...@security.debian.org>
> 
> CVE-2019-25009:
> https://rustsec.org/advisories/RUSTSEC-2019-0034.html
> https://github.com/hyperium/http/commit/82d53dbdfdb1ffbeb0323200a0bbd30b5f895fa7
> https://github.com/hyperium/http/commit/8ffe094df1431321d450860cc56a22dd53175f5e

I have added a removal hint for rust-http and its reverse dependencies.
They are not used by anything other than rust libraries.

Cheers
-- 
Sebastian Ramacher

Attachment: signature.asc
Description: PGP signature

Reply via email to