Package: librust-thin-vec-dev (0.2.13-2) Vec that takes up less space on the stack - Rust source code Other Packages Related to librust-thin-vec-dev: Download librust-thin-vec-dev Package file paths (15) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/share/cargo/registry/thin-vec-0.2.13/.cargo-checksum.json /usr/share/cargo/registry/thin-vec-0.2.13/Cargo.toml /usr/share/cargo/registry/thin-vec-0.2.13/.cargo_vcs_info.json /usr/share/cargo/registry/thin-vec-0.2.13/debian/patches/disable-unstable.patch /usr/share/cargo/registry/thin-vec-0.2.13/debian/patches/fix-tests-i386.patch /usr/share/cargo/registry/thin-vec-0.2.13/debian/patches/series /usr/share/cargo/registry/thin-vec-0.2.13/.github/workflows/rust.yml /usr/share/cargo/registry/thin-vec-0.2.13/.gitignore /usr/share/cargo/registry/thin-vec-0.2.13/LICENSE-APACHE /usr/share/cargo/registry/thin-vec-0.2.13/LICENSE-MIT /usr/share/cargo/registry/thin-vec-0.2.13/README.md /usr/share/cargo/registry/thin-vec-0.2.13/RELEASES.md /usr/share/cargo/registry/thin-vec-0.2.13/src/lib.rs /usr/share/doc/librust-thin-vec-dev/changelog.Debian.gz /usr/share/doc/librust-thin-vec-dev/copyright Field source: Debian 13 (Trixie) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-6654 ] Published: Apr 20, 2026, 10:05:52 AM UTC
Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate. A panic in `ptr::drop_in_place` skips setting the length to zero.
High(7.3) Affected Details (2) 0.2.13-2 · amd64 · trixie
Affected
nvd · rust-thin-vec · debian · 13
0.2.13-2 · arm64 · trixie
Affected
nvd · rust-thin-vec · debian · 13
Last synced: Oct 28, 2026, 3:52:27 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
0.2.13-2 / amd64 Observed Sep 1, 2026 sha256 b850b8208240…02784356Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): b850b820824018528c9a57060d0827c460fe5aee831fcc1ca3481c3102784356
Verify download
printf '%s %s\n' 'b850b820824018528c9a57060d0827c460fe5aee831fcc1ca3481c3102784356' 'librust-thin-vec-dev_0.2.13-2_amd64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main amd64
0.2.13-2 / arm64 Observed Sep 1, 2026 sha256 c39e5b7c20e8…584a5b73Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): c39e5b7c20e82016110290d59bd6657a0d262dee1a189d074c1e9fac584a5b73
Verify download
printf '%s %s\n' 'c39e5b7c20e82016110290d59bd6657a0d262dee1a189d074c1e9fac584a5b73' 'librust-thin-vec-dev_0.2.13-2_arm64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main arm64
