[Buildroot] [PATCH] package/rust: add CPE_ID_VENDOR

[Buildroot] [PATCH] package/rust: add CPE_ID_VENDOR

[Titouan Christophe via buildroot]

This gives a proper cpe-id string to the Rust buildroot package

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
---
 package/rust/rust.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/rust/rust.mk b/package/rust/rust.mk
index 22f3ca1455..d1298f5d3c 100644
--- a/package/rust/rust.mk
+++ b/package/rust/rust.mk
@@ -11,6 +11,7 @@ RUST_SOURCE = rustc-$(RUST_VERSION)-src.tar.xz
 RUST_SITE = https://static.rust-lang.org/dist
 RUST_LICENSE = Apache-2.0 or MIT
 RUST_LICENSE_FILES = LICENSE-APACHE LICENSE-MIT
+RUST_CPE_ID_VENDOR = "rust-lang"
 
 HOST_RUST_PROVIDES = host-rustc
 
-- 
2.50.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/rust: add CPE_ID_VENDOR

[Thomas Petazzoni via buildroot]

Hello Titouan,

On Mon, 28 Jul 2025 12:29:56 +0200
Titouan Christophe via buildroot <buildroot@buildroot.org> wrote:

> This gives a proper cpe-id string to the Rust buildroot package
> 
> Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>

We typically want some kind of proof/evidence that this string is
correct, like:

    package/python-future: add CPE identifier
    
    The cpe:2.3:a:pythoncharmers:python-future:*:*:*:*:*:*:*:* is
    valid for this package.
    
    See https://nvd.nist.gov/products/cpe/detail/6E3F033B-5565-461B-8450-D23E68419313

> +RUST_CPE_ID_VENDOR = "rust-lang"

Doubles quotes around the variable value are not needed.

Thanks!

Thomas
-- 
Thomas Petazzoni, co-owner and CEO, Bootlin
Embedded Linux and Kernel engineering and training
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

[Buildroot] [PATCH v2] package/rust: add CPE_ID_VENDOR

[Titouan Christophe via buildroot]

This gives a proper cpe-id string to the Rust buildroot package,
as it can be found in the NVD database:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rust-lang:rust

Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
---
Changes v1->v2:
    - Add link to CPE listing on NVD
    - Remove useless quotes in Make variable
---
 package/rust/rust.mk | 1 +
 1 file changed, 1 insertion(+)

diff --git a/package/rust/rust.mk b/package/rust/rust.mk
index 22f3ca1455..9999475c35 100644
--- a/package/rust/rust.mk
+++ b/package/rust/rust.mk
@@ -11,6 +11,7 @@ RUST_SOURCE = rustc-$(RUST_VERSION)-src.tar.xz
 RUST_SITE = https://static.rust-lang.org/dist
 RUST_LICENSE = Apache-2.0 or MIT
 RUST_LICENSE_FILES = LICENSE-APACHE LICENSE-MIT
+RUST_CPE_ID_VENDOR = rust-lang
 
 HOST_RUST_PROVIDES = host-rustc
 
-- 
2.50.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH v2] package/rust: add CPE_ID_VENDOR

[Thomas Petazzoni via buildroot]

On Tue, 29 Jul 2025 11:47:32 +0200
Titouan Christophe <titouan.christophe@mind.be> wrote:

> This gives a proper cpe-id string to the Rust buildroot package,
> as it can be found in the NVD database:
> https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rust-lang:rust
> 
> Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>

Thanks for the updated version:

Reviewed-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>

-- 
Thomas Petazzoni, co-owner and CEO, Bootlin
Embedded Linux and Kernel engineering and training
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH v2] package/rust: add CPE_ID_VENDOR

[Julien Olivain via buildroot]

On 29/07/2025 11:47, Titouan Christophe via buildroot wrote:
> This gives a proper cpe-id string to the Rust buildroot package,
> as it can be found in the NVD database:
> https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rust-lang:rust
> 
> Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>

Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH v2] package/rust: add CPE_ID_VENDOR

[Thomas Perale via buildroot]

In reply of:
> This gives a proper cpe-id string to the Rust buildroot package,
> as it can be found in the NVD database:
> https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:rust-lang:rust
> 
> Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>

Applied to 2025.02.x & 2025.05.x. Thanks

> ---
> Changes v1->v2:
>     - Add link to CPE listing on NVD
>     - Remove useless quotes in Make variable
> ---
>  package/rust/rust.mk | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/package/rust/rust.mk b/package/rust/rust.mk
> index 22f3ca1455..9999475c35 100644
> --- a/package/rust/rust.mk
> +++ b/package/rust/rust.mk
> @@ -11,6 +11,7 @@ RUST_SOURCE = rustc-$(RUST_VERSION)-src.tar.xz
>  RUST_SITE = https://static.rust-lang.org/dist
>  RUST_LICENSE = Apache-2.0 or MIT
>  RUST_LICENSE_FILES = LICENSE-APACHE LICENSE-MIT
> +RUST_CPE_ID_VENDOR = rust-lang
>  
>  HOST_RUST_PROVIDES = host-rustc
>  
> -- 
> 2.50.1
> 
> _______________________________________________
> buildroot mailing list
> buildroot@buildroot.org
> https://lists.buildroot.org/mailman/listinfo/buildroot
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot