[scarthgap,01/25] cargo: set CVE_PRODUCT

Message ID	98088c90b6e37ab27e7b4b2546abe9ecd863c02e.1780698373.git.yoann.congal@smile.fr
State	New
Headers	show Return-Path: <yoann.congal@smile.fr> ip: 209.85.128.52, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Subject: [OE-core][scarthgap 01/25] cargo: set CVE_PRODUCT Date: Sat, 6 Jun 2026 00:33:46 +0200 Message-ID: <98088c90b6e37ab27e7b4b2546abe9ecd863c02e.1780698373.git.yoann.congal@smile.fr> In-Reply-To: <cover.1780698373.git.yoann.congal@smile.fr> References: <cover.1780698373.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit
Series	[scarthgap,01/25] cargo: set CVE_PRODUCT \| expand [scarthgap,01/25] cargo: set CVE_PRODUCT [scarthgap,02/25] python3-requests: backport fix for CVE-2026-25645 [scarthgap,03/25] libssh2: fix for CVE-2026-7598 [scarthgap,04/25] systemd: update musl specific patch to apply [scarthgap,05/25] go.bbclass: change GOTMPDIR to improve reproducibility [scarthgap,06/25] go.bbclass: disable workspaces [scarthgap,07/25] oeqa: runtime: go: Increase test_go_compile/test_go_module timeout [scarthgap,08/25] lz4: Remove a reference to the rejected CVE-2025-62813 [scarthgap,09/25] libexif: fix for CVE-2026-32775 [scarthgap,10/25] libexif: fix for CVE-2026-40385, CVE-2026-40386 [scarthgap,11/25] perl: link to the system zlib instead of a vendored copy [scarthgap,12/25] gnupg: upgrade 2.4.8 -> 2.4.9 [scarthgap,13/25] openssh: patch CVE-2026-35385 [scarthgap,14/25] openssh: patch CVE-2026-35387 [scarthgap,15/25] openssh: patch CVE-2026-35388 [scarthgap,16/25] libarchive: Fix CVE-2026-4424 [scarthgap,17/25] scripts/install-buildtools: Update to 5.0.18 [scarthgap,18/25] classes/base: prefer gnu-prefixed HOSTTOOLS [scarthgap,19/25] wic: filemap: use separate fd for SEEK_HOLE probes [scarthgap,20/25] linux-yocto/6.6: update CVE exclusions (6.6.127) [scarthgap,21/25] tzdata/tzcode-native: upgrade 2026a -> 2026b [scarthgap,22/25] pseudo: Upgrade to 1.9.4 [scarthgap,23/25] pseudo: Upgrade to 1.9.5 [scarthgap,24/25] pseudo: Update 1.9.5 -> 1.9.6 [scarthgap,25/25] pseudo: Upgrade 1.9.6 -> 1.9.7

Message ID

98088c90b6e37ab27e7b4b2546abe9ecd863c02e.1780698373.git.yoann.congal@smile.fr

State

New

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Subject: [OE-core][scarthgap 01/25] cargo: set CVE_PRODUCT
Date: Sat,  6 Jun 2026 00:33:46 +0200
Message-ID: 
 <98088c90b6e37ab27e7b4b2546abe9ecd863c02e.1780698373.git.yoann.congal@smile.fr>
In-Reply-To: <cover.1780698373.git.yoann.congal@smile.fr>
References: <cover.1780698373.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

Series

[scarthgap,01/25] cargo: set CVE_PRODUCT | expand

Commit Message

Yoann Congal June 5, 2026, 10:33 p.m. UTC

From: Peter Marko <peter.marko@siemens.com>

This removes mediawiki:cargo CVEs from CVE metrics.
* CVE-2026-39837, CVE-2026-39839, CVE-2026-39840, CVE-2026-39841

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit a5cb71e7df95925a5c342c341e699e244b1b84f6)
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
---
 meta/recipes-devtools/rust/cargo_1.75.0.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-devtools/rust/cargo_1.75.0.bb b/meta/recipes-devtools/rust/cargo_1.75.0.bb
index a6d3f1754bc..573430ef4e7 100644
--- a/meta/recipes-devtools/rust/cargo_1.75.0.bb
+++ b/meta/recipes-devtools/rust/cargo_1.75.0.bb
@@ -17,6 +17,8 @@  require rust-snapshot.inc
 S = "${RUSTSRC}/src/tools/cargo"
 CARGO_VENDORING_DIRECTORY = "${RUSTSRC}/vendor"
 
+CVE_PRODUCT = "rust-lang:cargo"
+
 inherit cargo pkgconfig
 
 DEBUG_PREFIX_MAP += "-fdebug-prefix-map=${RUSTSRC}/vendor=${TARGET_DBGSRC_DIR}"

[scarthgap,01/25] cargo: set CVE_PRODUCT

Commit Message

Patch