package/podman: ignore CVE-2026-33414

As stated in the advisory:

The affected code is only used on Windows, all other operating systems are
not affected by this and can thus ignore the CVE patch.

https://github.com/containers/podman/security/advisories/GHSA-hc8w-h2mf-hp59

So mark it as ignored.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
This commit is contained in:
Peter Korsgaard
2026-05-29 22:43:49 +02:00
committed by Arnout Vandecappelle
parent da01b7271a
commit b3c1619c56

View File

@@ -33,6 +33,10 @@ PODMAN_TAGS += libsubid
PODMAN_CPE_ID_VERSION = $(subst v,,$(PODMAN_VERSION))
# Windows only issue:
# https://github.com/containers/podman/security/advisories/GHSA-hc8w-h2mf-hp59
PODMAN_IGNORE_CVES += CVE-2026-33414
ifeq ($(BR2_PACKAGE_BTRFS_PROGS),y)
PODMAN_DEPENDENCIES += btrfs-progs
define PODMAN_LINUX_CONFIG_FIXUPS_BTRFS