[High] Patch rust for CVE-2026-40034, CVE-2026-5222, CVE-2026-5223

[BinduSri-6522866]

Summary
Patch rust for CVE-2026-40034, CVE-2026-5222 and CVE-2026-5223

• Backported CVE-2026-40034 by adapting the upstream gix-submodule fix to the older vendored gix-config::string_filter API in Rust 1.75

Change Log

• modified: SPECS-EXTENDED/rust-cbindgen/rust-cbindgen.spec
• modified: SPECS-EXTENDED/tardev-snapshotter/tardev-snapshotter.spec
• modified: SPECS/clamav/clamav.spec
• modified: SPECS/cloud-hypervisor/cloud-hypervisor.spec
• modified: SPECS/flux/flux.spec
• modified: SPECS/influxdb/influxdb.spec
• modified: SPECS/kata-containers-cc/kata-containers-cc.spec
• modified: SPECS/kata-containers/kata-containers.spec
• modified: SPECS/librsvg2/librsvg2.spec
• modified: SPECS/mesa/mesa.spec
• modified: SPECS/netavark/netavark.spec
• modified: SPECS/rpm-ostree/rpm-ostree.spec
• new file: SPECS/rust/CVE-2026-40034.patch
• new file: SPECS/rust/CVE-2026-5222.patch
• new file: SPECS/rust/CVE-2026-5223.patch
• new file: SPECS/rust/CVE-2026-40034_1.75.patch
• new file: SPECS/rust/CVE-2026-5222_1.75.patch
• new file: SPECS/rust/CVE-2026-5223_1.75.patch
• modified: SPECS/rust/rust-1.75.spec
• modified: SPECS/rust/rust.spec

Does this affect the toolchain?
NO

Links to CVEs
https://nvd.nist.gov/vuln/detail/CVE-2026-5222
https://nvd.nist.gov/vuln/detail/CVE-2026-5223
https://nvd.nist.gov/vuln/detail/CVE-2026-40034

Test Methodology
Buddy build: