[2/6] cargo: set status of CVE-2023-40030

Message ID	20260426185025.13217-2-peter.marko@siemens.com
State	New
Headers	show Return-Path: <peter.marko@siemens.com> ip: 185.136.65.225, mailfrom: fm-256628-202604261850579d4abeb572000207f7-e2q4nd@rts-flowmailer.siemens.com) From: Peter Marko <peter.marko@siemens.com> To: openembedded-core@lists.openembedded.org Cc: Peter Marko <peter.marko@siemens.com> Subject: [PATCH 2/6] cargo: set status of CVE-2023-40030 Date: Sun, 26 Apr 2026 20:50:21 +0200 Message-ID: <20260426185025.13217-2-peter.marko@siemens.com> In-Reply-To: <20260426185025.13217-1-peter.marko@siemens.com> References: <20260426185025.13217-1-peter.marko@siemens.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Feedback-ID: 519:519-256628:519-21489:flowmailer
Series	[1/6] sudo: set status of CVE-2025-64170 and CVE-2025-64517 \| expand [1/6] sudo: set status of CVE-2025-64170 and CVE-2025-64517 [2/6] cargo: set status of CVE-2023-40030 [3/6] cargo: set CVE_PRODUCT [4/6] git: set status of 5 CVEs [5/6] ovmf: set status for 7 CVEs [6/6] ffmpeg: set status for 5 CVEs

Message ID

20260426185025.13217-2-peter.marko@siemens.com

State

New

Headers

From: Peter Marko <peter.marko@siemens.com>
To: openembedded-core@lists.openembedded.org
Cc: Peter Marko <peter.marko@siemens.com>
Subject: [PATCH 2/6] cargo: set status of CVE-2023-40030
Date: Sun, 26 Apr 2026 20:50:21 +0200
Message-ID: <20260426185025.13217-2-peter.marko@siemens.com>
In-Reply-To: <20260426185025.13217-1-peter.marko@siemens.com>
References: <20260426185025.13217-1-peter.marko@siemens.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Feedback-ID: 519:519-256628:519-21489:flowmailer

Series

[1/6] sudo: set status of CVE-2025-64170 and CVE-2025-64517 | expand

Commit Message

Peter Marko April 26, 2026, 6:50 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

sbom-cve-check has problem matching version 1.72.
It works only if cvelistV5 is modified to indicate 1.72.0.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta/recipes-devtools/rust/cargo_1.94.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-devtools/rust/cargo_1.94.1.bb b/meta/recipes-devtools/rust/cargo_1.94.1.bb
index fc41a19a25..36ec346113 100644
--- a/meta/recipes-devtools/rust/cargo_1.94.1.bb
+++ b/meta/recipes-devtools/rust/cargo_1.94.1.bb
@@ -83,3 +83,5 @@  RUSTLIB:append:class-nativesdk = " -L ${STAGING_DIR_HOST}/${SDKPATHNATIVE}/usr/l
 RUSTLIB_DEP:class-nativesdk = ""
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_STATUS[CVE-2023-40030] = "fixed-version: fixed since 1.72"

[2/6] cargo: set status of CVE-2023-40030

Commit Message

Patch