The NVD database uses version without a prefixing 'v' for containerd. e.g. https://nvd.nist.gov/vuln/detail/CVE-2022-23648
So we need to explictly set CVE_VERSION. Signed-off-by: Chen Qi <[email protected]> --- recipes-containers/containerd/containerd-opencontainers_git.bb | 1 + 1 file changed, 1 insertion(+) diff --git a/recipes-containers/containerd/containerd-opencontainers_git.bb b/recipes-containers/containerd/containerd-opencontainers_git.bb index 40b03163..2beeaf8f 100644 --- a/recipes-containers/containerd/containerd-opencontainers_git.bb +++ b/recipes-containers/containerd/containerd-opencontainers_git.bb @@ -16,6 +16,7 @@ LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://src/import/LICENSE;md5=1269f40c0d099c21a871163984590d89" CONTAINERD_VERSION = "v1.4.13" +CVE_VERSION = "1.4.13" EXTRA_OEMAKE += "GODEBUG=1" -- 2.33.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#7216): https://lists.yoctoproject.org/g/meta-virtualization/message/7216 Mute This Topic: https://lists.yoctoproject.org/mt/90701842/21656 Group Owner: [email protected] Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
