On 30/08/2018 16:02, YunQiang Su wrote: > Simon McVittie <s...@debian.org> 于2018年8月30日周四 下午6:09写道: >> >> Package: release.debian.org >> Severity: normal >> X-Debbugs-Cc: libr...@packages.debian.org, ru...@packages.debian.org, >> debian-m...@lists.debian.org >> Affects: src:librsvg >> >> The librsvg package in testing/unstable is currently lagging behind >> upstream by 1 year (2.40.x vs. 2.44.x) and I'm concerned that if there >> are security vulnerabilities in the lifetime of buster, we will not >> necessarily be able to fix them. Since 2.40.20, the 2.40.x branch is no >> longer supported by its upstream developer "except for emergencies". >> >> After 2.40.x, upstream started converting the internals of librsvg from >> C to Rust, for better memory-safety in the many interlocking parsers >> involved in interpreting SVGs. However, Debian still has release >> architectures that do not have cargo/dh-cargo/rustc (namely the 32-bit >> mips ports, mips and mipsel), so we cannot update to 2.42 or 2.44. >> Many of the ports architectures also don't have Rust available. >> >> Debian's default web browser, firefox-esr, also requires Rust and is >> also unbuildable on the 32-bit mips ports. >> > > rust should work on 32bit mips. The only work is bootstrap. > I am working on it.
Any progress on that? AFAIK the problem is the memory address space limit on mips(el). If we can get that fixed I'm afraid we'll have to resort to partial removals for buster. Cheers, Emilio