[meta-virtualization][scarthgap][PATCH] podman: set status for CVE-2026-33414

"Sudhir Dumbhare -X (sudumbha - E INFOCHIPS PRIVATE LIMITED at Cisco)" <[email protected]> Mon, 1 Jun 2026 11:35:37 -0700
Newsgroups org.yoctoproject.lists.meta-virtualization
Message-ID <[email protected]>
From: Sudhir Dumbhare <[email protected]>

The vulnerability only affects Podman's Windows HyperV backend.
Ignore this CVE because this recipe builds for the Linux variant.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2026-33414
https://github.com/containers/podman/security/advisories/GHSA-hc8w-h2mf-hp59

Signed-off-by: Sudhir Dumbhare <[email protected]>
---
 recipes-containers/podman/podman_git.bb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/recipes-containers/podman/podman_git.bb b/recipes-containers/podman/podman_git.bb
index b80b8d5b..44ee9e35 100644
--- a/recipes-containers/podman/podman_git.bb
+++ b/recipes-containers/podman/podman_git.bb
@@ -37,6 +37,7 @@ PV = "5.0.3+git"
 
 CVE_STATUS[CVE-2022-2989] = "fixed-version: fixed since v4.3.0"
 CVE_STATUS[CVE-2023-0778] = "fixed-version: fixed since v4.5.0"
+CVE_STATUS[CVE-2026-33414] = "not-applicable-platform: affects only Podman's Windows HyperV backend"
 
 PACKAGES =+ "${PN}-contrib"
 
-- 
2.44.4