[meta-virtualization] [scarthgap] [PATCH] go-distribution: Add CVE_PRODUCT to align with NVD CPE

[meta-virtualization] [scarthgap] [PATCH] go-distribution: Add CVE_PRODUCT to align with NVD CPE

[Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)]

From: Himanshu Jadon <hjadon@cisco.com>

CVE_PRODUCT has been set to docker:registry to align with the NVD CPE
product namespace for the distribution/registry codebase.

Only a single CPE entry exists in the NVD for this product:
 cpe:2.3:a:docker:registry

This ensures CVEs tracked for docker registry are matched for this recipe.

Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
(cherry picked from commit f8bbbf1f7d7b5c7ef6b2c9c86a93cb44524bc740)
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
---
 recipes-devtools/go/go-distribution_git.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/recipes-devtools/go/go-distribution_git.bb b/recipes-devtools/go/go-distribution_git.bb
index 598df964..740fdfe4 100644
--- a/recipes-devtools/go/go-distribution_git.bb
+++ b/recipes-devtools/go/go-distribution_git.bb
@@ -39,3 +39,5 @@ go_distribution_digeset_sysroot_preprocess () {
 }
 
 FILES:${PN} += "${prefix}/local/go/src/${PKG_NAME}/*"
+
+CVE_PRODUCT = "docker:registry"
-- 
2.35.6

Re: [meta-virtualization] [scarthgap] [PATCH] go-distribution: Add CVE_PRODUCT to align with NVD CPE

[Bruce Ashfield]

merged.

Bruce

In message: [meta-virtualization] [scarthgap] [PATCH] go-distribution: Add CVE_PRODUCT to align with NVD CPE
on 22/04/2026 Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.yoctoproject.org wrote:

> From: Himanshu Jadon <hjadon@cisco.com>
> 
> CVE_PRODUCT has been set to docker:registry to align with the NVD CPE
> product namespace for the distribution/registry codebase.
> 
> Only a single CPE entry exists in the NVD for this product:
>  cpe:2.3:a:docker:registry
> 
> This ensures CVEs tracked for docker registry are matched for this recipe.
> 
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
> (cherry picked from commit f8bbbf1f7d7b5c7ef6b2c9c86a93cb44524bc740)
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> ---
>  recipes-devtools/go/go-distribution_git.bb | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/recipes-devtools/go/go-distribution_git.bb b/recipes-devtools/go/go-distribution_git.bb
> index 598df964..740fdfe4 100644
> --- a/recipes-devtools/go/go-distribution_git.bb
> +++ b/recipes-devtools/go/go-distribution_git.bb
> @@ -39,3 +39,5 @@ go_distribution_digeset_sysroot_preprocess () {
>  }
>  
>  FILES:${PN} += "${prefix}/local/go/src/${PKG_NAME}/*"
> +
> +CVE_PRODUCT = "docker:registry"
> -- 
> 2.35.6
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9725): https://lists.yoctoproject.org/g/meta-virtualization/message/9725
> Mute This Topic: https://lists.yoctoproject.org/mt/118967290/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>