[meta-virtualization] [scarthgap] [PATCH] cni: Add CVE_PRODUCT to align with NVD CPE
"Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)" <[email protected]> Wed, 22 Apr 2026 21:39:32 -0700
| Newsgroups | org.yoctoproject.lists.meta-virtualization |
|---|---|
| Message-ID | <[email protected]> |
From: Himanshu Jadon <[email protected]> `CVE_PRODUCT` has been set to `linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins` to align with the product naming defined in the NVD CPE database for `cni`. The NVD CPE database contains product variants for this project under: `cpe:2.3:a:linuxfoundation:container_network_interface` `cpe:2.3:a:linuxfoundation:cni_network_plugins` The NVD references for these CPEs confirm that they correspond to the source code used in our recipe. Signed-off-by: Himanshu Jadon <[email protected]> Signed-off-by: Bruce Ashfield <[email protected]> (cherry picked from commit 84c856c442e420a8fcaa9498d1f0dc2fe511cc01) Signed-off-by: Himanshu Jadon <[email protected]> --- recipes-networking/cni/cni_git.bb | 3 +++ 1 file changed, 3 insertions(+) diff --git a/recipes-networking/cni/cni_git.bb b/recipes-networking/cni/cni_git.bb index b41b47cf..9c203aee 100644 --- a/recipes-networking/cni/cni_git.bb +++ b/recipes-networking/cni/cni_git.bb @@ -96,3 +96,6 @@ INSANE_SKIP:${PN} += "ldflags already-stripped" deltask compile_ptest_base RDEPENDS:${PN} += " ca-certificates" + +# Add CVE_PRODUCT to match the NVD CPE product names +CVE_PRODUCT = "linuxfoundation:container_network_interface linuxfoundation:cni_network_plugins" -- 2.35.6