* [meta-virtualization][PATCH] go-logrus: correct CVE_PRODUCT mapping
@ 2026-08-20 9:37 Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
2026-08-21 5:03 ` Devansh Patel
0 siblings, 1 reply; 3+ messages in thread
From: Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco) @ 2026-08-20 9:37 UTC (permalink / raw)
To: openembedded-devel; +Cc: xe-linux-external
From: Devansh Patel <devanshp@cisco.com>
The default "go-logrus" product does not match the packaged Logrus identity in NVD, so its CVE records are not associated with the recipe.
Use "turbopuffer:logrus", the exact NVD identity for the github.com/sirupsen/logrus source.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
recipes-devtools/go/go-logrus_git.bb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/recipes-devtools/go/go-logrus_git.bb b/recipes-devtools/go/go-logrus_git.bb
index 7b9e31a5..4f8a255e 100644
--- a/recipes-devtools/go/go-logrus_git.bb
+++ b/recipes-devtools/go/go-logrus_git.bb
@@ -12,6 +12,8 @@ SRC_URI = "git://${PKG_NAME};branch=master;protocol=https"
SRCREV = "a29884b9be3dc22c18338c0fe5a51d23e69731e4"
PV = "1.9.4+git"
+CVE_PRODUCT = "turbopuffer:logrus"
+
inherit meta-virt-depreciated-warning
do_install() {
--
2.35.6
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [meta-virtualization][PATCH] go-logrus: correct CVE_PRODUCT mapping
2026-08-20 9:37 [meta-virtualization][PATCH] go-logrus: correct CVE_PRODUCT mapping Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
@ 2026-08-21 5:03 ` Devansh Patel
0 siblings, 0 replies; 3+ messages in thread
From: Devansh Patel @ 2026-08-21 5:03 UTC (permalink / raw)
To: openembedded-devel
[-- Attachment #1: Type: text/plain, Size: 1159 bytes --]
On Thu, Aug 20, 2026 at 03:07 PM, Devansh Patel wrote:
>
> From: Devansh Patel <devanshp@cisco.com>
>
> The default "go-logrus" product does not match the packaged Logrus
> identity in NVD, so its CVE records are not associated with the recipe.
>
> Use "turbopuffer:logrus", the exact NVD identity for the
> github.com/sirupsen/logrus source.
>
> Signed-off-by: Devansh Patel <devanshp@cisco.com>
> ---
> recipes-devtools/go/go-logrus_git.bb | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/recipes-devtools/go/go-logrus_git.bb
> b/recipes-devtools/go/go-logrus_git.bb
> index 7b9e31a5..4f8a255e 100644
> --- a/recipes-devtools/go/go-logrus_git.bb
> +++ b/recipes-devtools/go/go-logrus_git.bb
> @@ -12,6 +12,8 @@ SRC_URI =
> "git://${PKG_NAME};branch=master;protocol=https"
> SRCREV = "a29884b9be3dc22c18338c0fe5a51d23e69731e4"
> PV = "1.9.4+git"
>
> +CVE_PRODUCT = "turbopuffer:logrus"
> +
> inherit meta-virt-depreciated-warning
>
> do_install() {
> --
> 2.35.6
Hi,
Please ignore this patch, as it was mistakenly submitted to the wrong layer mailing list. Apologies for the mix-up!
Regards,
Devansh
[-- Attachment #2: Type: text/html, Size: 1278 bytes --]
^ permalink raw reply [flat|nested] 3+ messages in thread
* [meta-virtualization][PATCH] go-logrus: correct CVE_PRODUCT mapping
@ 2026-08-21 5:08 Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
0 siblings, 0 replies; 3+ messages in thread
From: Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco) @ 2026-08-21 5:08 UTC (permalink / raw)
To: meta-virtualization; +Cc: xe-linux-external
From: Devansh Patel <devanshp@cisco.com>
The default "go-logrus" product does not match the packaged Logrus identity in NVD, so its CVE records are not associated with the recipe.
Use "turbopuffer:logrus", the exact NVD identity for the github.com/sirupsen/logrus source.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
recipes-devtools/go/go-logrus_git.bb | 2 ++
1 file changed, 2 insertions(+)
diff --git a/recipes-devtools/go/go-logrus_git.bb b/recipes-devtools/go/go-logrus_git.bb
index 7b9e31a5..4f8a255e 100644
--- a/recipes-devtools/go/go-logrus_git.bb
+++ b/recipes-devtools/go/go-logrus_git.bb
@@ -12,6 +12,8 @@ SRC_URI = "git://${PKG_NAME};branch=master;protocol=https"
SRCREV = "a29884b9be3dc22c18338c0fe5a51d23e69731e4"
PV = "1.9.4+git"
+CVE_PRODUCT = "turbopuffer:logrus"
+
inherit meta-virt-depreciated-warning
do_install() {
--
2.35.6
^ permalink raw reply related [flat|nested] 3+ messages in thread
end of thread, other threads:[~2026-08-21 5:08 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-20 9:37 [meta-virtualization][PATCH] go-logrus: correct CVE_PRODUCT mapping Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
2026-08-21 5:03 ` Devansh Patel
-- strict thread matches above, loose matches on Subject: below --
2026-08-21 5:08 Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.