[meta-virtualization] [scarthgap] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE

"Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)" <[email protected]> Wed, 22 Apr 2026 21:39:32 -0700
Newsgroups org.yoctoproject.lists.meta-virtualization
Message-ID <[email protected]>
From: Himanshu Jadon <[email protected]>

`CVE_PRODUCT` has been set to `linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins`
to align with the product naming defined in the NVD CPE database for `cni`.

The NVD CPE database contains product variants for this project under:
 `cpe:2.3:a:linuxfoundation:container_network_interface`
 `cpe:2.3:a:linuxfoundation:cni_network_plugins`

The NVD references for these CPEs confirm that they correspond to the
source code used in our recipe.

Signed-off-by: Himanshu Jadon <[email protected]>
Signed-off-by: Bruce Ashfield <[email protected]>
(cherry picked from commit 84c856c442e420a8fcaa9498d1f0dc2fe511cc01)
Signed-off-by: Himanshu Jadon <[email protected]>
---
 recipes-networking/cni/cni_git.bb | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/recipes-networking/cni/cni_git.bb b/recipes-networking/cni/cni_git.bb
index b41b47cf..9c203aee 100644
--- a/recipes-networking/cni/cni_git.bb
+++ b/recipes-networking/cni/cni_git.bb
@@ -96,3 +96,6 @@ INSANE_SKIP:${PN} += "ldflags already-stripped"
 deltask compile_ptest_base
 
 RDEPENDS:${PN} += " ca-certificates"
+
+# Add CVE_PRODUCT to match the NVD CPE product names
+CVE_PRODUCT = "linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins"
-- 
2.35.6