Re: CVS commit: pkgsrc/lang/rust

-------- Original Message --------
On Wednesday, 07/01/26 at 14:16 Greg Troxel <[email protected]> wrote:
"Adam Ciarcinski" <[email protected]> writes:

> Module Name:=09pkgsrc
> Committed By:=09adam
> Date:=09=09Tue Jun 30 15:13:10 UTC 2026
>
> Modified Files:
> =09pkgsrc/lang/rust: Makefile distinfo options.mk
>
> Log Message:
> rust: updated to 1.96.1
>
> Rust 1.96.1 fixes:
>
> Missing retries / timeouts in Cargo's HTTP client
> Miscompilation in a MIR optimization
>
> It also fixes three CVEs affecting libssh2 (which is compiled into Cargo)=
:
>
> CVE-2025-15661
> CVE-2026-55199
> CVE-2026-55200

We have a more or less rule that rust-bin is kept in sync with rust.
What's the plan for getting rust-bin to 1.96.1?


Also, for others, there's a new rust-system-libgit2 option, not
mentioned in the commit message, although I see it's default off.  I am
guessing the intent is to enable it by default at some point, for the
usual vendored-code-bad reasons.


Hopefully not, I'm strongly against changing the default to system-libgit2 =
because, I've fixed breakage due to mismatching versions too many times alr=
eady.