Re: [meta-virtualization] [scarthgap] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE

[Bruce Ashfield <bruce.ashfield@gmail.com>]

merged.

Bruce

In message: [meta-virtualization] [scarthgap] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE
on 22/04/2026 Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.yoctoproject.org wrote:

> From: Himanshu Jadon <hjadon@cisco.com>
> 
> `CVE_PRODUCT` has been set to `linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins`
> to align with the product naming defined in the NVD CPE database for `cni`.
> 
> The NVD CPE database contains product variants for this project under:
>  `cpe:2.3:a:linuxfoundation:container_network_interface`
>  `cpe:2.3:a:linuxfoundation:cni_network_plugins`
> 
> The NVD references for these CPEs confirm that they correspond to the
> source code used in our recipe.
> 
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
> (cherry picked from commit 84c856c442e420a8fcaa9498d1f0dc2fe511cc01)
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> ---
>  recipes-networking/cni/cni_git.bb | 3 +++
>  1 file changed, 3 insertions(+)
> 
> diff --git a/recipes-networking/cni/cni_git.bb b/recipes-networking/cni/cni_git.bb
> index b41b47cf..9c203aee 100644
> --- a/recipes-networking/cni/cni_git.bb
> +++ b/recipes-networking/cni/cni_git.bb
> @@ -96,3 +96,6 @@ INSANE_SKIP:${PN} += "ldflags already-stripped"
>  deltask compile_ptest_base
>  
>  RDEPENDS:${PN} += " ca-certificates"
> +
> +# Add CVE_PRODUCT to match the NVD CPE product names
> +CVE_PRODUCT = "linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins"
> -- 
> 2.35.6
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9723): https://lists.yoctoproject.org/g/meta-virtualization/message/9723
> Mute This Topic: https://lists.yoctoproject.org/mt/118967272/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>