Re: CVS commit: pkgsrc/lang/rust

[Adam <adam%netbsd.org@localhost>]

>> Rust 1.96.1 fixes:
>> 
>> Missing retries / timeouts in Cargo's HTTP client
>> Miscompilation in a MIR optimization
>> 
>> It also fixes three CVEs affecting libssh2 (which is compiled into Cargo):
>> 
>> CVE-2025-15661
>> CVE-2026-55199
>> CVE-2026-55200
> 
> We have a more or less rule that rust-bin is kept in sync with rust.
> What's the plan for getting rust-bin to 1.96.1?

The comment in rust-bin/Makefile says "he%NetBSD.org@localhost provided binaries". Havard, can you provide those?


> Also, for others, there's a new rust-system-libgit2 option, not
> mentioned in the commit message, although I see it's default off.  I am
> guessing the intent is to enable it by default at some point, for the
> usual vendored-code-bad reasons.

For the time being, we are not going to enable this. The benefit is to have rust compiler quicker and install smaller.

Adam