[meta-lts-mixins][scarthgap/rust][PATCH 15/35] cargo: set status of CVE-2023-40030

Scott Murray <[email protected]> Fri, 31 Jul 2026 07:32:45 -0400
Newsgroups org.yoctoproject.lists.yocto-patches
Message-ID <93193b19559efdbd55f6992cae982f0b98f7f76e.1785496469.git.scott.murray@konsulko.com>
From: Peter Marko <[email protected]>

sbom-cve-check has problem matching version 1.72.
It works only if cvelistV5 is modified to indicate 1.72.0.

Signed-off-by: Peter Marko <[email protected]>
Signed-off-by: Richard Purdie <[email protected]>
(adapted from oe-core commit ac18fd10e777b4ef688b7075c47c616e9405d752)
Signed-off-by: Scott Murray <[email protected]>
---
 recipes-devtools/rust/cargo_1.94.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/recipes-devtools/rust/cargo_1.94.1.bb b/recipes-devtools/rust/cargo_1.94.1.bb
index a6d3f17..1c60700 100644
--- a/recipes-devtools/rust/cargo_1.94.1.bb
+++ b/recipes-devtools/rust/cargo_1.94.1.bb
@@ -84,3 +84,5 @@ RUSTLIB:append:class-nativesdk = " -L ${STAGING_DIR_HOST}/${SDKPATHNATIVE}/usr/l
 RUSTLIB_DEP:class-nativesdk = ""
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_STATUS[CVE-2023-40030] = "fixed-version: fixed since 1.72"
-- 
2.55.0