Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #6466 > unrolled thread

On the status of rust/go packages

Back to article view | Back to linux.debian.security

Contents

  On the status of rust/go packages Sly <slycelot@yandex.ru> - 2025-09-27 04:50 +0200
    Re: On the status of rust/go packages Fabian Grünbichler <debian@fabian.gruenbichler.email> - 2025-09-27 10:20 +0200

#6466 — On the status of rust/go packages

Hi,

What is the correct way to get the list of packages affected by [1]?

"check-support-status" correctly lists librav1e0.7, but doesn't list,
e.g., fish, which IIUC is implemented in rust now.

I came up with the following, but now sure how correct this is:

for f in (dpkg --get-selections '*' |awk '{print $1}' |sed 's/:amd64//g'); apt-cache showsrc $f ; end |egrep '^Package:|^Build-Depends:' |egrep -B1 rustc

[1]: https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages

[toc] | [next] | [standalone]

#6470

On Sat, Sep 27, 2025, at 4:22 AM, Sly wrote:
> Hi,
>
> What is the correct way to get the list of packages affected by [1]?
>
> "check-support-status" correctly lists librav1e0.7, but doesn't list,
> e.g., fish, which IIUC is implemented in rust now.
>
> I came up with the following, but now sure how correct this is:
>
> for f in (dpkg --get-selections '*' |awk '{print $1}' |sed 
> 's/:amd64//g'); apt-cache showsrc $f ; end |egrep 
> '^Package:|^Build-Depends:' |egrep -B1 rustc
>
> [1]: 
> https://www.debian.org/releases/trixie/release-notes/issues.en.html#go-and-rust-based-packages

Static-Built-Using would be the proper way to check, but it is not
yet complete coverage-wise in Trixie, and might change semantics
a bit while being stabilized:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1069256

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.security

csiph-web