All of lore.kernel.org
 help / color / mirror / Atom feed
* [meta-virtualization] [scarthgap] [PATCH] criu: Add CVE_PRODUCT to align with NVD CPE
@ 2026-04-23  4:40 Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)
  2026-04-28 11:41 ` Bruce Ashfield
  0 siblings, 1 reply; 2+ messages in thread
From: Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco) @ 2026-04-23  4:40 UTC (permalink / raw)
  To: meta-virtualization; +Cc: vchavda

From: Himanshu Jadon <hjadon@cisco.com>

CVE_PRODUCT has been set to criu:checkpoint/restore_in_userspace to align
with the product naming used in the NVD CPE database for criu.

The slash-containing product token is intentional as NVD references this
project under checkpoint/restore_in_userspace.

Only a single CPE entry exists in the NVD for this product:
 cpe:2.3:a:criu:checkpoint/restore_in_userspace

Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
(cherry picked from commit 484a57d2df5d02e2cc64a7b7e03be93ffeaff8d4)
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
---
 recipes-containers/criu/criu_git.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/recipes-containers/criu/criu_git.bb b/recipes-containers/criu/criu_git.bb
index cccd3e3c..a8915d16 100644
--- a/recipes-containers/criu/criu_git.bb
+++ b/recipes-containers/criu/criu_git.bb
@@ -111,3 +111,5 @@ FILES:${PN}-staticdev += " \
             ${libexecdir}/compel/std.lib.a \
             ${libexecdir}/compel/fds.lib.a \
             "
+
+CVE_PRODUCT = "criu:checkpoint\/restore_in_userspace"
-- 
2.35.6



^ permalink raw reply related	[flat|nested] 2+ messages in thread

* Re: [meta-virtualization] [scarthgap] [PATCH] criu: Add CVE_PRODUCT to align with NVD CPE
  2026-04-23  4:40 [meta-virtualization] [scarthgap] [PATCH] criu: Add CVE_PRODUCT to align with NVD CPE Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)
@ 2026-04-28 11:41 ` Bruce Ashfield
  0 siblings, 0 replies; 2+ messages in thread
From: Bruce Ashfield @ 2026-04-28 11:41 UTC (permalink / raw)
  To: hjadon; +Cc: meta-virtualization, vchavda

merged.

Bruce

In message: [meta-virtualization] [scarthgap] [PATCH] criu: Add CVE_PRODUCT to align with NVD CPE
on 22/04/2026 Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.yoctoproject.org wrote:

> From: Himanshu Jadon <hjadon@cisco.com>
> 
> CVE_PRODUCT has been set to criu:checkpoint/restore_in_userspace to align
> with the product naming used in the NVD CPE database for criu.
> 
> The slash-containing product token is intentional as NVD references this
> project under checkpoint/restore_in_userspace.
> 
> Only a single CPE entry exists in the NVD for this product:
>  cpe:2.3:a:criu:checkpoint/restore_in_userspace
> 
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
> (cherry picked from commit 484a57d2df5d02e2cc64a7b7e03be93ffeaff8d4)
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> ---
>  recipes-containers/criu/criu_git.bb | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/recipes-containers/criu/criu_git.bb b/recipes-containers/criu/criu_git.bb
> index cccd3e3c..a8915d16 100644
> --- a/recipes-containers/criu/criu_git.bb
> +++ b/recipes-containers/criu/criu_git.bb
> @@ -111,3 +111,5 @@ FILES:${PN}-staticdev += " \
>              ${libexecdir}/compel/std.lib.a \
>              ${libexecdir}/compel/fds.lib.a \
>              "
> +
> +CVE_PRODUCT = "criu:checkpoint\/restore_in_userspace"
> -- 
> 2.35.6
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9724): https://lists.yoctoproject.org/g/meta-virtualization/message/9724
> Mute This Topic: https://lists.yoctoproject.org/mt/118967280/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
> 



^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2026-04-28 11:42 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-04-23  4:40 [meta-virtualization] [scarthgap] [PATCH] criu: Add CVE_PRODUCT to align with NVD CPE Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)
2026-04-28 11:41 ` Bruce Ashfield

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.