[meta-virtualization][wrynose][PATCH] podman: set status for CVE-2019-10152 and CVE-2020-1726
Peter Marko <[email protected]> Tue, 21 Jul 2026 19:12:24 +0200
| Newsgroups | org.yoctoproject.lists.meta-virtualization |
|---|---|
| Message-ID | <[email protected]> |
From: Peter Marko <[email protected]> "Fixed in" can be checked in [1] and [2] for these historical CVEs which are wrongly reported as open in current cve-metrics. [1] https://nvd.nist.gov/vuln/detail/CVE-2019-10152 [2] https://security-tracker.debian.org/tracker/CVE-2020-1726 Signed-off-by: Peter Marko <[email protected]> --- recipes-containers/podman/podman_git.bb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/recipes-containers/podman/podman_git.bb b/recipes-containers/podman/podman_git.bb index 886d6e90..c2254eff 100644 --- a/recipes-containers/podman/podman_git.bb +++ b/recipes-containers/podman/podman_git.bb @@ -29,6 +29,8 @@ GO_IMPORT = "import" PV = "5.8.3-dev" +CVE_STATUS[CVE-2019-10152] = "fixed-version: fixed since v1.4.0" +CVE_STATUS[CVE-2020-1726] = "fixed-version: fixed since v1.8.1" CVE_STATUS[CVE-2022-2989] = "fixed-version: fixed since v4.3.0" CVE_STATUS[CVE-2023-0778] = "fixed-version: fixed since v4.5.0"