[PATCH] rust: Upgrade 1.96.0 -> 1.96.1

[PATCH] rust: Upgrade 1.96.0 -> 1.96.1

[sundeep.kokkonda]

From: Sundeep KOKKONDA <sundeep.kokkonda@windriver.com>

https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/

Rust 1.96.1 fixes:
- Missing retries / timeouts in Cargo's HTTP client
- Miscompilation in a MIR optimization
- Cargo CVEs:: CVE-2025-15661, CVE-2026-55199, CVE-2026-55200

Test results:
No changes

Assisted-by: Kiro
Signed-off-by: Sundeep KOKKONDA <sundeep.kokkonda@windriver.com>
---
 meta/conf/distro/include/tcmode-default.inc                     | 2 +-
 meta/recipes-devtools/rust/{cargo_1.96.0.bb => cargo_1.96.1.bb} | 0
 .../rust/{libstd-rs_1.96.0.bb => libstd-rs_1.96.1.bb}           | 0
 ...t-cross-canadian_1.96.0.bb => rust-cross-canadian_1.96.1.bb} | 0
 meta/recipes-devtools/rust/rust-source.inc                      | 2 +-
 meta/recipes-devtools/rust/{rust_1.96.0.bb => rust_1.96.1.bb}   | 0
 6 files changed, 2 insertions(+), 2 deletions(-)
 rename meta/recipes-devtools/rust/{cargo_1.96.0.bb => cargo_1.96.1.bb} (100%)
 rename meta/recipes-devtools/rust/{libstd-rs_1.96.0.bb => libstd-rs_1.96.1.bb} (100%)
 rename meta/recipes-devtools/rust/{rust-cross-canadian_1.96.0.bb => rust-cross-canadian_1.96.1.bb} (100%)
 rename meta/recipes-devtools/rust/{rust_1.96.0.bb => rust_1.96.1.bb} (100%)

diff --git a/meta/conf/distro/include/tcmode-default.inc b/meta/conf/distro/include/tcmode-default.inc
index c0d9f8fafe..d378e301f2 100644
--- a/meta/conf/distro/include/tcmode-default.inc
+++ b/meta/conf/distro/include/tcmode-default.inc
@@ -12,7 +12,7 @@ PREFERRED_PROVIDER_virtual/gettext ??= "gettext"
 GCCVERSION ?= "16.%"
 SDKGCCVERSION ?= "${GCCVERSION}"
 GLIBCVERSION ?= "2.43%"
-RUSTVERSION ?= "1.96.0%"
+RUSTVERSION ?= "1.96.1%"
 
 PREFERRED_VERSION_gcc ?= "${GCCVERSION}"
 PREFERRED_VERSION_gcc-cross-${TARGET_ARCH} ?= "${GCCVERSION}"
diff --git a/meta/recipes-devtools/rust/cargo_1.96.0.bb b/meta/recipes-devtools/rust/cargo_1.96.1.bb
similarity index 100%
rename from meta/recipes-devtools/rust/cargo_1.96.0.bb
rename to meta/recipes-devtools/rust/cargo_1.96.1.bb
diff --git a/meta/recipes-devtools/rust/libstd-rs_1.96.0.bb b/meta/recipes-devtools/rust/libstd-rs_1.96.1.bb
similarity index 100%
rename from meta/recipes-devtools/rust/libstd-rs_1.96.0.bb
rename to meta/recipes-devtools/rust/libstd-rs_1.96.1.bb
diff --git a/meta/recipes-devtools/rust/rust-cross-canadian_1.96.0.bb b/meta/recipes-devtools/rust/rust-cross-canadian_1.96.1.bb
similarity index 100%
rename from meta/recipes-devtools/rust/rust-cross-canadian_1.96.0.bb
rename to meta/recipes-devtools/rust/rust-cross-canadian_1.96.1.bb
diff --git a/meta/recipes-devtools/rust/rust-source.inc b/meta/recipes-devtools/rust/rust-source.inc
index 094baba526..a8d8de7165 100644
--- a/meta/recipes-devtools/rust/rust-source.inc
+++ b/meta/recipes-devtools/rust/rust-source.inc
@@ -10,7 +10,7 @@ SRC_URI += "https://static.rust-lang.org/dist/rustc-${RUST_VERSION}-src.tar.xz;n
             file://0003-explicit-tail-calls-disable-two-tests.patch;patchdir=${RUSTSRC} \
             file://0004-explicit-tail-calls-ignore-tests-on-unsupported-llvm.patch;patchdir=${RUSTSRC} \
 "
-SRC_URI[rust.sha256sum] = "b99ce16cdf0ecfc761b585ac84d131b46733465a02f8ecd0ff2de9713c62ee09"
+SRC_URI[rust.sha256sum] = "77a6ff3003a4ad0cb00697b043c879e3e1a15d945b1a1f63818903bfc3fa8b98"
 
 RUSTSRC = "${UNPACKDIR}/rustc-${RUST_VERSION}-src"
 
diff --git a/meta/recipes-devtools/rust/rust_1.96.0.bb b/meta/recipes-devtools/rust/rust_1.96.1.bb
similarity index 100%
rename from meta/recipes-devtools/rust/rust_1.96.0.bb
rename to meta/recipes-devtools/rust/rust_1.96.1.bb
-- 
2.49.0

Re: [OE-core] [PATCH] rust: Upgrade 1.96.0 -> 1.96.1

[Mathieu Dubois-Briand]

On Sun Jul 5, 2026 at 5:20 PM CEST, Sundeep KOKKONDA via lists.openembedded.org wrote:
> From: Sundeep KOKKONDA <sundeep.kokkonda@windriver.com>
>
> https://blog.rust-lang.org/2026/06/30/Rust-1.96.1/
>
> Rust 1.96.1 fixes:
> - Missing retries / timeouts in Cargo's HTTP client
> - Miscompilation in a MIR optimization
> - Cargo CVEs:: CVE-2025-15661, CVE-2026-55199, CVE-2026-55200
>
> Test results:
> No changes
>
> Assisted-by: Kiro
> Signed-off-by: Sundeep KOKKONDA <sundeep.kokkonda@windriver.com>
> ---

Hi Sundeep,

This was a bit expected, we still have the reproducibility issue:

AssertionError: The following deb packages are different and not in exclusion list:
/srv/pokybuild/yocto-worker/reproducible/build/build-st/reproducibleB-extended/tmp/deploy/deb/./x86-64-v3/rust-dbg_1.97.1-r0_amd64.deb
/srv/pokybuild/yocto-worker/reproducible/build/build-st/reproducibleB-extended/tmp/deploy/deb/./x86-64-v3/rust_1.97.1-r0_amd64.deb
The following ipk packages are different and not in exclusion list:
/srv/pokybuild/yocto-worker/reproducible/build/build-st/reproducibleB-extended/tmp/deploy/ipk/./x86-64-v3/rust-dbg_1.97.1-r0_x86-64-v3.ipk
/srv/pokybuild/yocto-worker/reproducible/build/build-st/reproducibleB-extended/tmp/deploy/ipk/./x86-64-v3/rust_1.97.1-r0_x86-64-v3.ipk
The following rpm packages are different and not in exclusion list:
/srv/pokybuild/yocto-worker/reproducible/build/build-st/reproducibleB-extended/tmp/deploy/rpm/./x86_64_v3/rust-1.97.1-r0.x86_64_v3.rpm
/srv/pokybuild/yocto-worker/reproducible/build/build-st/reproducibleB-extended/tmp/deploy/rpm/./x86_64_v3/rust-dbg-1.97.1-r0.x86_64_v3.rpm

https://autobuilder.yoctoproject.org/valkyrie/#/builders/37/builds/4417
https://valkyrie.yocto.io/pub/repro-fail/oe-reproducible-20260717-4vji97l6/packages/diff-html/

Can you have a look at the issue?

Thanks,
Mathieu

-- 
Mathieu Dubois-Briand, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com