helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-05-18 22:56:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

grpc: set status for CVE-2026-33186

Browse Source 
CPE per NVD report is for "go", while this is C++ component:
* cpe:2.3🅰️grpc:grpc:*:*:*:*:*:go:*:*
Also the link to adisory within NVD report says "grpc-go":
* https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Peter Marko 2026-04-12 17:37:04 +02:00 committed by Anuj Mittal
parent a1b14b7a3a
commit 0ef4a2ecee
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
meta-oe/recipes-devtools/grpc/grpc_1.60.1.bb
View File

@ -67,3 +67,5 @@ FILES:${PN}-compiler += " \
${bindir} \
${libdir}/libgrpc_plugin_support${SOLIBS} \
"
CVE_STATUS[CVE-2026-33186] = "cpe-incorrect: this CVE is for golang version of grpc"