File _patchinfo of Package patchinfo.41613

<patchinfo incident="41613">
  <issue tracker="bnc" id="1222175">rustc 1.77 adds spurious -Cstrip=debuginfo to buildline</issue>
  <issue tracker="bnc" id="1249012">VUL-0: CVE-2025-58160: cargo-c,cargo-packaging,cargo-audit: tracing-subscriber: Tracing log pollution</issue>
  <issue tracker="cve" id="2025-58160"/>
  <packager>firstyear</packager>
  <rating>low</rating>
  <category>security</category>
  <summary>Security update for cargo-packaging, rust-bindgen</summary>
  <description>This update for cargo-packaging and rust-bindgen fixes the following issues:

cargo-packaging was updated to version 1.3.0+0:

- CVE-2025-58160: Fixed tracing log pollution in tracing-subscriber (bsc#1249012)

Other fixes:

- Prevent stripping debug info (bsc#1222175) 

rust-bindgen was updated to 0.72.0.
</description>
</patchinfo>
openSUSE Build Service is sponsored by