Ubuntu
rustc package

rustc: expose vendored sources information

Bug #1987674 reported by Simon Chopin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
rustc (Ubuntu)
Fix Released
High
Simon Chopin

Bug Description

As part of the MIR for rustc, it was agreed that we should expose the precise version of the vendored dependencies for the package in a way that's easily exploitable. For now, the chosen approach will be to publish them in a Vendored-Sources-Rust field in the source control file, making it greppable in the published Source archive file. See https://github.com/cpaelzer/ubuntu-mir/pull/3

Simon Chopin (schopin)
Changed in rustc (Ubuntu):
status: Confirmed → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package rustc - 1.59.0+dfsg1-1~ubuntu3

---------------
rustc (1.59.0+dfsg1-1~ubuntu3) kinetic; urgency=medium

  * Add XS-Vendored-Sources-Rust field support (LP: #1987674)
    Needed an extra patch due to rustc being a multi-crate source package.

 -- Simon Chopin <email address hidden> Thu, 25 Aug 2022 19:01:32 +0200

Changed in rustc (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.