Bug 1115645

Summary: Factory/TW requires cargo/rust cbindgen to be able to compile Firefox >= 63
Product: [openSUSE] openSUSE Tumbleweed Reporter: Wolfgang Rosenauer <wolfgang>
Component: OtherAssignee: Luke Jones <luke>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Major    
Priority: P5 - None CC: astieger, wolfgang
Version: Current   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Bug Depends on:    
Bug Blocks: 1112852    

Description Wolfgang Rosenauer 2018-11-12 16:07:53 UTC
Firefox 63 also introduced a new mandatory build dependency on the tool cbindgen.

We need this package included to be able to build and release FF >= 63.

Since Luke indicated he could possibly prepare it for TW I'll assign to him for the moment.
Comment 1 Luke Jones 2018-11-13 22:26:56 UTC
Can you tell me if it is the crate library required, or the binary?
Comment 2 Wolfgang Rosenauer 2018-11-14 07:12:41 UTC
The tool itself (the binary) I would say:

def cbindgen_version(cbindgen):
    cbindgen_min_version = Version('0.6.2')

    # cbindgen x.y.z
    version = Version(check_cmd_output(cbindgen, '--version').strip().split(" ")[1])

    if version < cbindgen_min_version:
        die(dedent('''\
        cbindgen version {} is too old. At least version {} is required.

        Please update using 'cargo install cbindgen --force' or running
        './mach bootstrap', after removing the existing executable located at
        {}.
        '''.format(version, cbindgen_min_version, cbindgen)))

    return version
Comment 3 Luke Jones 2018-11-14 08:30:11 UTC
Will close as resolved. cbindgen is on it's way in to factory.
Comment 4 Andreas Stieger 2018-11-19 15:03:45 UTC
If you meant devel:languages:rust/rust-cbindgen, that was never submitted to Factory.
Comment 5 Swamp Workflow Management 2018-11-19 15:40:09 UTC
This is an autogenerated message for OBS integration:
This bug (1115645) was mentioned in
https://build.opensuse.org/request/show/650225 Factory / rust-cbindgen
Comment 6 Andreas Stieger 2018-11-19 19:10:03 UTC
Could the maintainers of devel:languages:rust / rust-cbindgen please accept the review on this submission into Factory?

https://build.opensuse.org/request/show/650291 Factory / rust-cbindgen
Comment 7 Luke Jones 2018-11-19 19:29:56 UTC
(In reply to Andreas Stieger from comment #6)
> Could the maintainers of devel:languages:rust / rust-cbindgen please accept
> the review on this submission into Factory?
> 
> https://build.opensuse.org/request/show/650291 Factory / rust-cbindgen

Very sorry. I must have looked at my queue and thought it was already accepted, rather than not submitted.
Comment 8 Wolfgang Rosenauer 2018-11-28 11:14:57 UTC
Added to Factory
Comment 10 Swamp Workflow Management 2020-07-06 16:13:52 UTC
openSUSE-SU-2020:0933-1: An update that solves one vulnerability and has two fixes is now available.

Category: security (moderate)
Bug References: 1115645,1154817,1173202
CVE References: CVE-2020-1967
Sources used:
openSUSE Leap 15.1 (src):    rust-1.43.1-lp151.5.13.1, rust-cbindgen-0.14.1-lp151.8.2
Comment 11 Swamp Workflow Management 2020-07-07 10:13:08 UTC
openSUSE-SU-2020:0945-1: An update that solves one vulnerability and has two fixes is now available.

Category: security (moderate)
Bug References: 1115645,1154817,1173202
CVE References: CVE-2020-1967
Sources used:
openSUSE Leap 15.2 (src):    rust-1.43.1-lp152.3.5.1, rust-cbindgen-0.14.1-lp152.2.4.1
Comment 12 Swamp Workflow Management 2020-07-24 16:20:35 UTC
SUSE-SU-2020:2041-1: An update that solves one vulnerability and has two fixes is now available.

Category: security (moderate)
Bug References: 1115645,1154817,1173202
CVE References: CVE-2020-1967
Sources used:
SUSE Linux Enterprise Module for Development Tools 15-SP2 (src):    rust-1.43.1-12.1
SUSE Linux Enterprise Module for Development Tools 15-SP1 (src):    rust-1.43.1-12.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.