* [meta-virtualization][PATCH] runc: correct CVE_PRODUCT mapping
@ 2026-08-21 5:08 Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
0 siblings, 0 replies; only message in thread
From: Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco) @ 2026-08-21 5:08 UTC (permalink / raw)
To: meta-virtualization; +Cc: xe-linux-external
From: Devansh Patel <devanshp@cisco.com>
The current "runc" mapping generates a wildcard-vendor product identity for
the packaged Open Container Initiative runtime.
Use "linuxfoundation:runc", the NVD dictionary CPE and configuration identity
for opencontainers/runc. This changes the generated product identity, but the
pinned sbom-cve-check database has no current CVE report delta.
Signed-off-by: Devansh Patel <devanshp@cisco.com>
---
recipes-containers/runc/runc_git.bb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/recipes-containers/runc/runc_git.bb b/recipes-containers/runc/runc_git.bb
index 625ec5d2..c2e004d6 100644
--- a/recipes-containers/runc/runc_git.bb
+++ b/recipes-containers/runc/runc_git.bb
@@ -12,6 +12,6 @@ RUNC_VERSION = "1.5.1"
RPROVIDES:${PN} += "runc-docker"
RPROVIDES:${PN} += "runc-opencontainers"
-CVE_PRODUCT = "runc"
+CVE_PRODUCT = "linuxfoundation:runc"
LDFLAGS += "${@bb.utils.contains('DISTRO_FEATURES', 'ld-is-gold', ' -fuse-ld=bfd', '', d)}"
--
2.35.6
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-08-21 5:08 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-08-21 5:08 [meta-virtualization][PATCH] runc: correct CVE_PRODUCT mapping Devansh Patel -X (devanshp - E INFOCHIPS PRIVATE LIMITED at Cisco)
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.