Re: [meta-virtualization][PATCH] skopeo: convert CVE_CHECK_IGNORE to new CVE_STATUS format

[Bruce Ashfield <bruce.ashfield@gmail.com>]

merged.

Bruce

In message: [meta-virtualization][PATCH] skopeo: convert CVE_CHECK_IGNORE to new CVE_STATUS format
on 29/07/2023 Peter Marko via lists.yoctoproject.org wrote:

> From: Peter Marko <peter.marko@siemens.com>
> 
> See https://git.openembedded.org/openembedded-core/commit/?id=34f682a24b7075b12ec308154b937ad118d69fe5
> 
> Signed-off-by: Peter Marko <peter.marko@siemens.com>
> ---
>  recipes-containers/skopeo/skopeo_git.bb | 4 +---
>  1 file changed, 1 insertion(+), 3 deletions(-)
> 
> diff --git a/recipes-containers/skopeo/skopeo_git.bb b/recipes-containers/skopeo/skopeo_git.bb
> index e00fcc7..feff9df 100644
> --- a/recipes-containers/skopeo/skopeo_git.bb
> +++ b/recipes-containers/skopeo/skopeo_git.bb
> @@ -35,11 +35,9 @@ inherit pkgconfig
>  
>  inherit container-host
>  
> -# This CVE was fixed in the container image go library skopeo is using.
> -# See:
>  # https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10214
>  # https://github.com/containers/image/issues/654
> -CVE_CHECK_IGNORE += "CVE-2019-10214"
> +CVE_STATUS[CVE-2019-10214] = "fixed-version: This CVE was fixed in the container image go library skopeo is using."
>  
>  # This disables seccomp and apparmor, which are on by default in the
>  # go package. 
> -- 
> 2.30.2
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#8151): https://lists.yoctoproject.org/g/meta-virtualization/message/8151
> Mute This Topic: https://lists.yoctoproject.org/mt/100434760/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>