Re: CVS commit: pkgsrc/lang/rust

"Adam Ciarcinski" <[email protected]> writes:

> Module Name:	pkgsrc
> Committed By:	adam
> Date:		Tue Jun 30 15:13:10 UTC 2026
>
> Modified Files:
> 	pkgsrc/lang/rust: Makefile distinfo options.mk
>
> Log Message:
> rust: updated to 1.96.1
>
> Rust 1.96.1 fixes:
>
> Missing retries / timeouts in Cargo's HTTP client
> Miscompilation in a MIR optimization
>
> It also fixes three CVEs affecting libssh2 (which is compiled into Cargo):
>
> CVE-2025-15661
> CVE-2026-55199
> CVE-2026-55200

We have a more or less rule that rust-bin is kept in sync with rust.
What's the plan for getting rust-bin to 1.96.1?


Also, for others, there's a new rust-system-libgit2 option, not
mentioned in the commit message, although I see it's default off.  I am
guessing the intent is to enable it by default at some point, for the
usual vendored-code-bad reasons.