[meta-virtualization] [scarthgap] [PATCH] containerd-opencontainers: align CVE_PRODUCT with NVD CPE naming

"Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)" <[email protected]> Wed, 22 Apr 2026 21:38:17 -0700
Newsgroups org.yoctoproject.lists.meta-virtualization
Message-ID <[email protected]>
From: Himanshu Jadon <[email protected]>

Update CVE_PRODUCT from containerd to linuxfoundation:containerd in
containerd-opencontainers recipe to match the vendor-qualified
NVD CPE naming.

This aligns with the master update[1] and avoids potential CVE lookup
gaps caused by an unqualified product token.

Reference:
[1] https://git.yoctoproject.org/meta-virtualization/commit/?id=f829fbfda0f14365235d48dbe2055121fbc0718c

Signed-off-by: Himanshu Jadon <[email protected]>
---
 recipes-containers/containerd/containerd-opencontainers_git.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-containers/containerd/containerd-opencontainers_git.bb b/recipes-containers/containerd/containerd-opencontainers_git.bb
index 3144a5a6..4ecc915a 100644
--- a/recipes-containers/containerd/containerd-opencontainers_git.bb
+++ b/recipes-containers/containerd/containerd-opencontainers_git.bb
@@ -96,4 +96,4 @@ COMPATIBLE_HOST = "^(?!(qemu)?mips).*"
 
 RDEPENDS:${PN} += " ${VIRTUAL-RUNTIME_container_runtime}"
 
-CVE_PRODUCT = "containerd"
+CVE_PRODUCT = "linuxfoundation:containerd"
-- 
2.35.6