From: Bruce Ashfield <bruce.ashfield@gmail.com>
To: hjadon@cisco.com
Cc: meta-virtualization@lists.yoctoproject.org, vchavda@cisco.com
Subject: Re: [meta-virtualization] [master] [PATCH] criu: Add CVE_PRODUCT to align with NVD CPE
Date: Tue, 21 Apr 2026 02:36:55 +0000 [thread overview]
Message-ID: <aebix8I7hE0y717X@gmail.com> (raw)
In-Reply-To: <20260417083343.2343973-1-hjadon@cisco.com>
merged.
Bruce
In message: [meta-virtualization] [master] [PATCH] criu: Add CVE_PRODUCT to align with NVD CPE
on 17/04/2026 Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.yoctoproject.org wrote:
> From: Himanshu Jadon <hjadon@cisco.com>
>
> CVE_PRODUCT has been set to criu:checkpoint/restore_in_userspace to align
> with the product naming used in the NVD CPE database for criu.
>
> The slash-containing product token is intentional as NVD references this
> project under checkpoint/restore_in_userspace.
>
> Only a single CPE entry exists in the NVD for this product:
> cpe:2.3:a:criu:checkpoint/restore_in_userspace
>
> Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
> ---
> recipes-containers/criu/criu_git.bb | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/recipes-containers/criu/criu_git.bb b/recipes-containers/criu/criu_git.bb
> index c27ca56e..1d36ca18 100644
> --- a/recipes-containers/criu/criu_git.bb
> +++ b/recipes-containers/criu/criu_git.bb
> @@ -108,3 +108,5 @@ FILES:${PN}-staticdev += " \
> ${libexecdir}/compel/std.lib.a \
> ${libexecdir}/compel/fds.lib.a \
> "
> +
> +CVE_PRODUCT = "criu:checkpoint\/restore_in_userspace"
> --
> 2.35.6
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9710): https://lists.yoctoproject.org/g/meta-virtualization/message/9710
> Mute This Topic: https://lists.yoctoproject.org/mt/118872439/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
prev parent reply other threads:[~2026-04-21 2:37 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-04-17 8:33 [meta-virtualization] [master] [PATCH] criu: Add CVE_PRODUCT to align with NVD CPE Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)
2026-04-21 2:36 ` Bruce Ashfield [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=aebix8I7hE0y717X@gmail.com \
--to=bruce.ashfield@gmail.com \
--cc=hjadon@cisco.com \
--cc=meta-virtualization@lists.yoctoproject.org \
--cc=vchavda@cisco.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox