Re: [meta-virtualization] [master] [PATCH] containerd: Add CVE_PRODUCT to align with NVD CPE

[Bruce Ashfield <bruce.ashfield@gmail.com>]

merged.

Bruce

In message: [meta-virtualization] [master] [PATCH] containerd: Add CVE_PRODUCT to align with NVD CPE
on 27/03/2026 Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.yoctoproject.org wrote:

> From: Himanshu Jadon <hjadon@cisco.com>
> 
> `CVE_PRODUCT` has been set to `linuxfoundation:containerd` to align
> with the product naming defined in the NVD CPE database for
> `containerd`.
> 
> Only a single CPE entry exists in the NVD for this product:
>  `cpe:2.3:a:linuxfoundation:containerd`
> 
> The NVD references for this CPE confirm that it corresponds to the
> source code used in our recipe.
> 
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> ---
>  recipes-containers/containerd/containerd_git.bb | 3 +++
>  1 file changed, 3 insertions(+)
> 
> diff --git a/recipes-containers/containerd/containerd_git.bb b/recipes-containers/containerd/containerd_git.bb
> index d69518d4..51d7c2e2 100644
> --- a/recipes-containers/containerd/containerd_git.bb
> +++ b/recipes-containers/containerd/containerd_git.bb
> @@ -105,3 +105,6 @@ RDEPENDS:${PN} += " ${VIRTUAL-RUNTIME_container_runtime}"
>  ## configured in the distro, since we may have collisions.
>  CNI_NETWORKING_FILES ?= "${UNPACKDIR}/cni-containerd-net.conflist"
>  inherit cni_networking
> +
> +# Add CVE_PRODUCT to match the NVD CPE product name
> +CVE_PRODUCT = "linuxfoundation:containerd"
> -- 
> 2.35.6
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9676): https://lists.yoctoproject.org/g/meta-virtualization/message/9676
> Mute This Topic: https://lists.yoctoproject.org/mt/118532463/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>