[meta-lts-mixins][scarthgap/rust][PATCH 16/35] cargo: set CVE_PRODUCT

Scott Murray <[email protected]> Fri, 31 Jul 2026 07:32:46 -0400
Newsgroups org.yoctoproject.lists.yocto-patches
Message-ID <8f0c82ab82b38bb500170943e01a5ec309f76657.1785496469.git.scott.murray@konsulko.com>
From: Peter Marko <[email protected]>

This removes mediawiki:cargo CVEs from CVE metrics.
* CVE-2026-39837, CVE-2026-39839, CVE-2026-39840, CVE-2026-39841

Signed-off-by: Peter Marko <[email protected]>
Signed-off-by: Richard Purdie <[email protected]>
(adapted from oe-core commit a5cb71e7df95925a5c342c341e699e244b1b84f6)
Signed-off-by: Scott Murray <[email protected]>
---
 recipes-devtools/rust/cargo_1.94.1.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/recipes-devtools/rust/cargo_1.94.1.bb b/recipes-devtools/rust/cargo_1.94.1.bb
index 1c60700..64944ff 100644
--- a/recipes-devtools/rust/cargo_1.94.1.bb
+++ b/recipes-devtools/rust/cargo_1.94.1.bb
@@ -17,6 +17,8 @@ require rust-snapshot.inc
 S = "${RUSTSRC}/src/tools/cargo"
 CARGO_VENDORING_DIRECTORY = "${RUSTSRC}/vendor"
 
+CVE_PRODUCT = "rust-lang:cargo"
+
 inherit cargo pkgconfig
 
 DEBUG_PREFIX_MAP += "-fdebug-prefix-map=${RUSTSRC}/vendor=${TARGET_DBGSRC_DIR}"
-- 
2.55.0