Re: CVS commit: pkgsrc/lang/rust

Adam <[email protected]> Wed, 1 Jul 2026 15:37:42 +0200
Newsgroups gmane.os.netbsd.devel.packages
Message-ID <[email protected]>
>> Rust 1.96.1 fixes:
>>=20
>> Missing retries / timeouts in Cargo's HTTP client
>> Miscompilation in a MIR optimization
>>=20
>> It also fixes three CVEs affecting libssh2 (which is compiled into =
Cargo):
>>=20
>> CVE-2025-15661
>> CVE-2026-55199
>> CVE-2026-55200
>=20
> We have a more or less rule that rust-bin is kept in sync with rust.
> What's the plan for getting rust-bin to 1.96.1?

The comment in rust-bin/Makefile says "[email protected] provided binaries". =
Havard, can you provide those?


> Also, for others, there's a new rust-system-libgit2 option, not
> mentioned in the commit message, although I see it's default off.  I =
am
> guessing the intent is to enable it by default at some point, for the
> usual vendored-code-bad reasons.

For the time being, we are not going to enable this. The benefit is to =
have rust compiler quicker and install smaller.

Adam