rust-lz4-flex (0.13.0-1) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/rust-team/debcargo-conf.git [src/lz4-flex]
JSON
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Repo size: 559079424
Browser: https://salsa.debian.org/rust-team/debcargo-conf/tree/master/src/lz4-flex
Last scan: 2026-08-17 11:14:10+00
Error: https://salsa.debian.org/api/v4/projects/rust-team%2Fdebcargo-conf API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
Next scan: 2026-08-25 04:52:00+00

Debian changelog in Git:

rust-lz4-flex (0.13.0-1) unstable; urgency=medium

  * Package lz4_flex 0.13.0 from crates.io using debcargo 2.8.2
  * Fixes leak of data from uninitialized memory, possibly revealing
    sensitive information (RUSTSEC-2026-0041, GHSA-vvp9-7p8x-rfvv,
    CVE-2026-32829)

 -- kpcyrd <git@rxv.cc>  Tue, 17 Mar 2026 13:08:23 +0100