package/podman: ignore CVE-2026-33414

As stated in the advisory:

The affected code is only used on Windows, all other operating systems are
not affected by this and can thus ignore the CVE patch.

https://github.com/containers/podman/security/advisories/GHSA-hc8w-h2mf-hp59

So mark it as ignored.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
(cherry picked from commit b3c1619c56)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Peter Korsgaard
2026-05-29 22:43:49 +02:00
committed by Thomas Perale
parent 4e36050660
commit ae710096ba

View File

@@ -33,6 +33,10 @@ PODMAN_TAGS += libsubid
PODMAN_CPE_ID_VERSION = $(subst v,,$(PODMAN_VERSION))
# Windows only issue:
# https://github.com/containers/podman/security/advisories/GHSA-hc8w-h2mf-hp59
PODMAN_IGNORE_CVES += CVE-2026-33414
ifeq ($(BR2_PACKAGE_BTRFS_PROGS),y)
PODMAN_DEPENDENCIES += btrfs-progs
define PODMAN_LINUX_CONFIG_FIXUPS_BTRFS