Re: [meta-virtualization] [master] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE

merged.

Bruce

In message: [meta-virtualization] [master] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE
on 16/04/2026 Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco) via lists.yoctoproject.org wrote:

> From: Himanshu Jadon <[email protected]>
> 
> `CVE_PRODUCT` has been set to `linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins`
> to align with the product naming defined in the NVD CPE database for `cni`.
> 
> The NVD CPE database contains product variants for this project under:
>  `cpe:2.3:a:linuxfoundation:container_network_interface`
>  `cpe:2.3:a:linuxfoundation:cni_network_plugins`
> 
> The NVD references for these CPEs confirm that they correspond to the
> source code used in our recipe.
> 
> Signed-off-by: Himanshu Jadon <[email protected]>
> ---
>  recipes-networking/cni/cni_git.bb | 3 +++
>  1 file changed, 3 insertions(+)
> 
> diff --git a/recipes-networking/cni/cni_git.bb b/recipes-networking/cni/cni_git.bb
> index f6617c1f..727a9799 100644
> --- a/recipes-networking/cni/cni_git.bb
> +++ b/recipes-networking/cni/cni_git.bb
> @@ -139,3 +139,6 @@ INSANE_SKIP:${PN} += "ldflags already-stripped"
>  
>  deltask compile_ptest_base
>  RRECOMMENDS:${PN} += "iptables iproute2"
> +
> +# Add CVE_PRODUCT to match the NVD CPE product names
> +CVE_PRODUCT = "linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins"
> -- 
> 2.35.6
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9707): https://lists.yoctoproject.org/g/meta-virtualization/message/9707
> Mute This Topic: https://lists.yoctoproject.org/mt/118870668/1050810
> Group Owner: [email protected]
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [[email protected]]
> -=-=-=-=-=-=-=-=-=-=-=-
>