I think the XS-Vendored-Copy or whatever should be split out onto a ML thread so that we can work on something that's equally applicable for the Go ecosystem, even if retroactively. I'll take care of it soon.
I'm preparing an upload for rustc that fixes the crossbeam-utils CVE in *both* copies, this time. However, I'd rather not do multiple uploads, so I need a clarification from paelzer: @paelzer, assuming rustc gets to main, do we need to downgrade the Recommends: cargo into a Suggests? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1957932 Title: [MIR] rustc, cargo To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cargo/+bug/1957932/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
