[meta-virtualization] [master] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE

"Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)" <[email protected]> Thu, 16 Apr 2026 20:37:00 -0700
Newsgroups org.yoctoproject.lists.meta-virtualization
Message-ID <[email protected]>
From: Himanshu Jadon <[email protected]>

`CVE_PRODUCT` has been set to `linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins`
to align with the product naming defined in the NVD CPE database for `cni`.

The NVD CPE database contains product variants for this project under:
 `cpe:2.3:a:linuxfoundation:container_network_interface`
 `cpe:2.3:a:linuxfoundation:cni_network_plugins`

The NVD references for these CPEs confirm that they correspond to the
source code used in our recipe.

Signed-off-by: Himanshu Jadon <[email protected]>
---
 recipes-networking/cni/cni_git.bb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/recipes-networking/cni/cni_git.bb b/recipes-networking/cni/cni_git.bb
index f6617c1f..727a9799 100644
--- a/recipes-networking/cni/cni_git.bb
+++ b/recipes-networking/cni/cni_git.bb
@@ -139,3 +139,6 @@ INSANE_SKIP:${PN} += "ldflags already-stripped"
 
 deltask compile_ptest_base
 RRECOMMENDS:${PN} += "iptables iproute2"
+
+# Add CVE_PRODUCT to match the NVD CPE product names
+CVE_PRODUCT = "linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins"
-- 
2.35.6