[meta-virtualization] [scarthgap] [PATCH] go-distribution: Add CVE_PRODUCT to align with NVD CPE
"Himanshu Jadon -X (hjadon - E INFOCHIPS PRIVATE LIMITED at Cisco)" <[email protected]> Wed, 22 Apr 2026 21:41:41 -0700
| Newsgroups | org.yoctoproject.lists.meta-virtualization |
|---|---|
| Message-ID | <[email protected]> |
From: Himanshu Jadon <[email protected]> CVE_PRODUCT has been set to docker:registry to align with the NVD CPE product namespace for the distribution/registry codebase. Only a single CPE entry exists in the NVD for this product: cpe:2.3:a:docker:registry This ensures CVEs tracked for docker registry are matched for this recipe. Signed-off-by: Himanshu Jadon <[email protected]> Signed-off-by: Bruce Ashfield <[email protected]> (cherry picked from commit f8bbbf1f7d7b5c7ef6b2c9c86a93cb44524bc740) Signed-off-by: Himanshu Jadon <[email protected]> --- recipes-devtools/go/go-distribution_git.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-devtools/go/go-distribution_git.bb b/recipes-devtools/go/go-distribution_git.bb index 598df964..740fdfe4 100644 --- a/recipes-devtools/go/go-distribution_git.bb +++ b/recipes-devtools/go/go-distribution_git.bb @@ -39,3 +39,5 @@ go_distribution_digeset_sysroot_preprocess () { } FILES:${PN} += "${prefix}/local/go/src/${PKG_NAME}/*" + +CVE_PRODUCT = "docker:registry" -- 2.35.6