Comment 20 for bug 1957932

Revision history for this message
Simon Chopin (schopin) wrote : Re: [MIR] rustc, cargo

I think the XS-Vendored-Copy or whatever should be split out onto a ML thread so that we can work on something that's equally applicable for the Go ecosystem, even if retroactively. I'll take care of it soon.

I'm preparing an upload for rustc that fixes the crossbeam-utils CVE in *both* copies, this time. However, I'd rather not do multiple uploads, so I need a clarification from paelzer:

@paelzer, assuming rustc gets to main, do we need to downgrade the Recommends: cargo into a Suggests?