Rust February 2026

rust@lists.fedoraproject.org

4 participants
3 discussions

Intent to retire: rust-pore in EPEL 8 and 9
by Michel Lind 05 Mar '26

05 Mar '26

Dear all, I currently maintain `rust-pore` across Fedora and EPEL, but unfortunately development on the open source repo has stalled - this was used at work but recent activity is mostly on an internal fork (alas). Since it's causing an issue with keeping the set of Rust crates up to date (it's needed patching to either compile with newer crates, or has to be compiled with compatibility packages), I'd like to request having it retired in EPEL 8 and 9. Best regards, -- _o) Michel Lind _( ) https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2 README: https://fedoraproject.org/wiki/User:Salimma#README

1 1

Packaging wayscriber
by W. Michael Petullo 11 Feb '26

11 Feb '26

I would like to package wayscriber [1], which is written in Rust, for Fedora. I have not yet created a package for software written in Rust, but I have packaged software written in C, Python, Go, and other languages. My hugo package is an example of Go a package that makes use of vendored dependencies. The trouble with wayscriber is twofold: it relies on Rust crates that are not yet packaged, and it relies on Rust crates that are packaged, but at an incompatible version. Here is what I see when I try to build: [...] error: Failed build dependencies: (crate(iced/canvas) >= 0.12.0 with crate(iced/canvas) < 0.13.0~) is needed by wayscriber-0.9.9.3-1.fc43.x86_64 (crate(iced/default) >= 0.12.0 with crate(iced/default) < 0.13.0~) is needed by wayscriber-0.9.9.3-1.fc43.x86_64 (crate(iced/tokio) >= 0.12.0 with crate(iced/tokio) < 0.13.0~) is needed by wayscriber-0.9.9.3-1.fc43.x86_64 (crate(png/default) >= 0.17.0 with crate(png/default) < 0.18.0~) is needed by wayscriber-0.9.9.3-1.fc43.x86_64 (crate(schemars/default) >= 0.9.0 with crate(schemars/default) < 0.10.0~) is needed by wayscriber-0.9.9.3-1.fc43.x86_64 (crate(schemars/derive) >= 0.9.0 with crate(schemars/derive) < 0.10.0~) is needed by wayscriber-0.9.9.3-1.fc43.x86_64 (crate(smithay-client-toolkit) >= 0.20.0 with crate(smithay-client-toolkit) < 0.21.0~) is needed by wayscriber-0.9.9.3-1.fc43.x86_64 (crate(smithay-client-toolkit/calloop) >= 0.20.0 with crate(smithay-client-toolkit/calloop) < 0.21.0~) is needed by wayscriber-0.9.9.3-1.fc43.x86_64 (crate(smithay-client-toolkit/xkbcommon) >= 0.20.0 with crate(smithay-client-toolkit/xkbcommon) < 0.21.0~) is needed by wayscriber-0.9.9.3-1.fc43.x86_64 The first three dependencies (iced/*) are not packaged, and the others are packaged at incompatible versions. Does anyone have any advice on how to proceed? I see from the Rust packaging guidelines [2] that vendored dependencies are discouraged. I did fiddle around with rust2rpm (I am familiar with go2rpm). However, I do not think that wayscriber itself in at crates.io. It looks like cosmic-panel.spec also uses iced and as a vendored dependency. I thought that might be a good model, but I have not successfully generated vendor-config-X.toml and vendo-X.tar.gz (using rust2rpm?). [1] https://wayscriber.com/ [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/Rust/ -- Mike :wq

2 1

Upcoming mini-mass rebuild of Rust applications for RUSTSEC / CVE advisories
by Fabio Valentini 08 Feb '26

08 Feb '26

Hi all, The Rust SIG is currently preparing updates to address potential security issues in four Rust crates (and libgit2), and bytes https://rustsec.org/advisories/RUSTSEC-2026-0007.html git2 https://rustsec.org/advisories/RUSTSEC-2026-0008.html jsonwebtoken https://www.cve.org/CVERecord?id=CVE-2026-25537 time https://rustsec.org/advisories/RUSTSEC-2026-0009.html The "bytes", "git2", and "time" crates are very widely used, so the lists of affected applications are long and have significant overlaps between these three. As such, we decided that it made sense to just handle all four issues simultaneously with one mini-mass-rebuild. The list of affected Rust applications that will be attempted to be rebuilt for the listed issues is included below. Packages that are co-maintained by the Rust SIG will be handled by me. Packages that are not will need to be handled by their respective package maintainers, with provenpackager help, or will be skipped. The following side-tags are used to collect the necessary library updates (already done) and application rebuilds: - f45-build-side-128366 - f44-build-side-128368 - f43-build-side-128370 - f42-build-side-128372 - epel10.2-build-side-128374 - epel9-build-side-128376 Fabio ============================================================ Affected applications: bytes ===== - asciinema - atuin - aw-server-rust - awatcher - bustle - clamav - clevis-pin-trustee - crun-vm - envision - fido-device-onboard - glycin - gotify-desktop - greetd - helix - keylime-agent-rust - librsvg2 - matrix-synapse - mirrorlist-server - nispor - nmstate - ntpd-rs - python-orjson - python-uv-build - rust-afterburn - rust-below - rust-busd - rust-cargo-c - rust-cargo-deny - rust-coreos-installer - rust-crypto-auditing-agent - rust-crypto-auditing-client - rust-crypto-auditing-event-broker - rust-crypto-auditing-log-parser - rust-gst-plugin-dav1d - rust-gst-plugin-reqwest - rust-ingredients - rust-jql - rust-monitord - rust-monitord-exporter - rust-muvm - rust-nu - rust-oo7-cli - rust-podman-sequoia - rust-pore - rust-procs - rust-rbspy - rust-rbw - rust-redlib - rust-routinator - rust-sccache - rust-sequoia-chameleon-gnupg - rust-sequoia-keystore-server - rust-sequoia-octopus-librnp - rust-sequoia-sq - rust-sevctl - rust-sigul-pesign-bridge - rust-snpguest - rust-tealdeer - rust-weezl - rust-ybaas - rustup - sad - selenium-manager - trustee - trustee-guest-components - tuigreet - uv git2 ==== - envision - rust-bat - rust-cargo-c - rust-git-delta - rust-git-interactive-rebase-tool - rust-gitui - rust-heatseeker - rust-lsd - rust-pore - rust-pretty-git-prompt - rust-tokei jsonwebtoken ============ - trustee - uv time ==== - atuin - aw-server-rust - clevis-pin-tpm2 - clevis-pin-trustee - envision - fido-device-onboard - gotify-desktop - keylime-agent-rust - librsvg2 - maturin - nmstate - retis - rust-add-determinism - rust-afterburn - rust-bat - rust-below - rust-btrd - rust-cargo-c - rust-cargo-deny - rust-crypto-auditing-agent - rust-crypto-auditing-client - rust-crypto-auditing-event-broker - rust-crypto-auditing-log-parser - rust-dua-cli - rust-eif_build - rust-git-delta - rust-gitui - rust-gst-plugin-reqwest - rust-nu - rust-onefetch - rust-oo7-cli - rust-pleaser - rust-procs - rust-rd-agent - rust-rd-hashd - rust-rd-util - rust-redlib - rust-resctl-bench - rust-resctl-demo - rust-routinator - rust-scx_layered - rust-scx_rustland - rust-scx_rusty - rust-sequoia-chameleon-gnupg - rust-snpguest - rust-speakersafetyd - rust-wiremix - tbtools - trustee - trustee-guest-components - tuigreet - uv

1 1

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Rust February 2026