[meta-virtualization] [scarthgap] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE

[meta-virtualization] [scarthgap] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE

[Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)]

From: Himanshu Jadon <hjadon@cisco.com>

`CVE_PRODUCT` has been set to `linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins`
to align with the product naming defined in the NVD CPE database for `cni`.

The NVD CPE database contains product variants for this project under:
 `cpe:2.3:a:linuxfoundation:container_network_interface`
 `cpe:2.3:a:linuxfoundation:cni_network_plugins`

The NVD references for these CPEs confirm that they correspond to the
source code used in our recipe.

Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
(cherry picked from commit 84c856c442e420a8fcaa9498d1f0dc2fe511cc01)
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
---
 recipes-networking/cni/cni_git.bb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/recipes-networking/cni/cni_git.bb b/recipes-networking/cni/cni_git.bb
index b41b47cf..9c203aee 100644
--- a/recipes-networking/cni/cni_git.bb
+++ b/recipes-networking/cni/cni_git.bb
@@ -96,3 +96,6 @@ INSANE_SKIP:${PN} += "ldflags already-stripped"
 deltask compile_ptest_base
 
 RDEPENDS:${PN} += " ca-certificates"
+
+# Add CVE_PRODUCT to match the NVD CPE product names
+CVE_PRODUCT = "linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins"
-- 
2.35.6

Re: [meta-virtualization] [scarthgap] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE

[Bruce Ashfield]

merged.

Bruce

In message: [meta-virtualization] [scarthgap] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE
on 22/04/2026 Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.yoctoproject.org wrote:

> From: Himanshu Jadon <hjadon@cisco.com>
> 
> `CVE_PRODUCT` has been set to `linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins`
> to align with the product naming defined in the NVD CPE database for `cni`.
> 
> The NVD CPE database contains product variants for this project under:
>  `cpe:2.3:a:linuxfoundation:container_network_interface`
>  `cpe:2.3:a:linuxfoundation:cni_network_plugins`
> 
> The NVD references for these CPEs confirm that they correspond to the
> source code used in our recipe.
> 
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
> (cherry picked from commit 84c856c442e420a8fcaa9498d1f0dc2fe511cc01)
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> ---
>  recipes-networking/cni/cni_git.bb | 3 +++
>  1 file changed, 3 insertions(+)
> 
> diff --git a/recipes-networking/cni/cni_git.bb b/recipes-networking/cni/cni_git.bb
> index b41b47cf..9c203aee 100644
> --- a/recipes-networking/cni/cni_git.bb
> +++ b/recipes-networking/cni/cni_git.bb
> @@ -96,3 +96,6 @@ INSANE_SKIP:${PN} += "ldflags already-stripped"
>  deltask compile_ptest_base
>  
>  RDEPENDS:${PN} += " ca-certificates"
> +
> +# Add CVE_PRODUCT to match the NVD CPE product names
> +CVE_PRODUCT = "linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins"
> -- 
> 2.35.6
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9723): https://lists.yoctoproject.org/g/meta-virtualization/message/9723
> Mute This Topic: https://lists.yoctoproject.org/mt/118967272/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>