Package: rust-rustls
Version: 0.23.45+ds-1
X-Debbugs-Cc: <[email protected]>
Severity: important

Hello!

I'm trying to update rust-minreq, so we can eventually get rid of rustls-0.21 (due to[1][2][3], as far as I can tell this debian-rust team package is currently the only reason rustls-0.21 is still needed).

[1]: https://rustsec.debian.net/advisories/RUSTSEC-2026-0098.html
[2]: https://rustsec.debian.net/advisories/RUSTSEC-2026-0099.html
[3]: https://rustsec.debian.net/advisories/RUSTSEC-2026-0104.html

When building, I get the following error:

```
E: Unable to satisfy dependencies. Reached two conflicting assignments:
   1. librust-minreq-dev:amd64=3.0.0-1 is selected for install because:
      1. satisfy:command-line:amd64=1 is selected for install
      2. satisfy:command-line:amd64 Depends librust-minreq-dev
      3. librust-minreq-dev:amd64 is available in versions 3.0.0-1, 2.13.4-4+b1
         [selected librust-minreq-dev:amd64]
      For context, additional choices that could not be installed:
      * In librust-minreq-dev:amd64 is available in versions 3.0.0-1, 
2.13.4-4+b1:
        - librust-minreq-dev:amd64=2.13.4-4+b1 is not selected for install
2. librust-minreq-dev:amd64=3.0.0-1 Depends librust-rustls-0.23+default-dev (>= 0.23.35)
      but none of the choices are installable:
      [no choices]
librust-minreq-dev:https FAIL badpkg
```

I could verify `librust-rustls-0.23+default-dev` is indeed not available:

```
$ apt install -s librust-rustls-0.23+default-dev
NOTE: This is only a simulation!
      apt needs root privileges for real execution.
      Keep also in mind that locking is deactivated,
      so don't depend on the relevance to the real current situation!

Error: Unable to locate package librust-rustls-0.23+default-dev
Error: Couldn't find any package by glob 'librust-rustls-0.23+default-dev'
```

With the +default suffix removed it's installable however:

```
$ apt install -s librust-rustls-0.23-dev
NOTE: This is only a simulation!
      apt needs root privileges for real execution.
      Keep also in mind that locking is deactivated,
      so don't depend on the relevance to the real current situation!

Note, selecting 'librust-rustls-dev' instead of 'librust-rustls-0.23-dev'
Installing:
  librust-rustls-dev

Installing dependencies:
librust-aho-corasick-dev librust-equivalent-dev librust-serde-derive-dev librust-alloc-no-stdlib-dev librust-erased-serde-dev librust-serde-dev
[...]
```

Please add a +default provides so dependency resolution works for crates that depend on rustls with default features, and no other feature enabled.

Thank you! :)

Reply via email to