[meta-virtualization][PATCH] runc: correct CVE_PRODUCT mapping
"Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)" <[email protected]>
| Newsgroups | org.yoctoproject.lists.meta-virtualization |
|---|---|
| Message-ID | <[email protected]> |
From: Devansh Patel <[email protected]> The current "runc" mapping generates a wildcard-vendor product identity for the packaged Open Container Initiative runtime. Use "linuxfoundation:runc", the NVD dictionary CPE and configuration identity for opencontainers/runc. This changes the generated product identity, but the pinned sbom-cve-check database has no current CVE report delta. Signed-off-by: Devansh Patel <[email protected]> --- recipes-containers/runc/runc_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-containers/runc/runc_git.bb b/recipes-containers/runc/runc_git.bb index 625ec5d2..c2e004d6 100644 --- a/recipes-containers/runc/runc_git.bb +++ b/recipes-containers/runc/runc_git.bb @@ -12,6 +12,6 @@ RUNC_VERSION = "1.5.1" RPROVIDES:${PN} += "runc-docker" RPROVIDES:${PN} += "runc-opencontainers" -CVE_PRODUCT = "runc" +CVE_PRODUCT = "linuxfoundation:runc" LDFLAGS += "${@bb.utils.contains('DISTRO_FEATURES', 'ld-is-gold', ' -fuse-ld=bfd', '', d)}" -- 2.35.6