Project

General

Profile

Bug #5844

Updated by Juliana Fajardini Reichow about 1 year ago

Dependency miniz_oxide breaks Debian 9, Ubuntu 22.04... 
 This is an indirect dependency through flate2  
 Flate2 official MSRV is 1.63 
 miniz_oxide-0.6.2 should work 
 But flate2 specifies 0.6.* 

 <pre> 
 suricata v7.0.0-rc1 
 ├── flate2 v1.0.25 
 │     ├── crc32fast v1.3.2 
 │     │     └── cfg-if v1.0.0 
 │     └── miniz_oxide v0.6.4 
 │         └── adler v1.0.2 
 </pre> 

 Workaround: 
 <pre> 
 diff --git a/rust/Cargo.toml.in b/rust/Cargo.toml.in 
 index 011e8bb744..7d51ba9075 100644 
 --- a/rust/Cargo.toml.in 
 +++ b/rust/Cargo.toml.in 
 @@ -34,6 +34,7 @@ num-derive = "~0.2.5" 
  num-traits = "~0.2.14" 
  widestring = "~0.4.3" 
  flate2 = "~1.0.19" 
 +miniz_oxide = "=0.6.2" 
  brotli = "~3.3.0" 
  hkdf = "~0.12.3" 
  aes = "~0.6.0" 
 </pre>

Back