4 ms·

I left it out because it seems to me OP was mistaken. Debian Stable ships with Rust 1.24.1, which is well beyond the last vulnerable version 1.20. https://pack

by stfwn 8y ago

I left it out because it seems to me OP was mistaken. Debian Stable ships with Rust 1.24.1, which is well beyond the last vulnerable version 1.20. https://packages.debian.org/stable/rust/ https://packages.debian.org/stable/rust/

Strom 8y ago
The blog post was published on 2018-08-18. Perhaps Debian stable was shipping some other version back then?
- stfwn 8y ago
  No, it doesn't seem like it to me: https://metadata.ftp-master.debian.org/changelogs/main/r/rustc/rustc_1.24.1+dfsg1-1~deb9u4_changelog https://metadata.ftp-master.debian.org/changelogs/main/r/rus...
  - rini17 8y ago
    It got treated as security fix only after the article was published: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906585 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906585 ..this means i386 and these sysadmins who apply only security updates were still affected at that time.