helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-08-12 01:50:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

python-grpcio(-tools): add grpc:grpc to cve product

Browse Source 
These grpc python modules contain parts of grpc core.
Each CVE needs to be assessed if the patch applies also to core parts
included in each module.

Note that so far there was never a CVE specific for python module, only
for grpc:grpc and many of those needed to be fixed at leasts in grpcio:

sqlite> select vendor, product, count(*) from products where product like '%grpc%' group by vendor, product;
grpc|grpc|21
grpck|grpck|1
linuxfoundation|grpc_swift|9
microsoft|grpconv|1
opentelemetry|configgrpc|1

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f993cb2ecb62193bcce8d3d0e06e180a7fef44b8)
Signed-off-by: Himanshu Jadon <hjadon@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Peter Marko 2026-05-07 08:53:01 -07:00 committed by Anuj Mittal
parent fb4ebd1200
commit 6b76759967
No known key found for this signature in database
GPG Key ID: 4340AEFE69F5085C
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
meta-python/recipes-devtools/python/python3-grpcio-tools_1.62.2.bb
View File

@ -21,3 +21,5 @@ do_compile:prepend() {
}
BBCLASSEXTEND = "native nativesdk"
CVE_PRODUCT += "grpc:grpc"

2
meta-python/recipes-devtools/python/python3-grpcio_1.62.2.bb
View File

@ -51,3 +51,5 @@ CLEANBROKEN = "1"
BBCLASSEXTEND = "native nativesdk"
CCACHE_DISABLE = "1"
CVE_PRODUCT += "grpc:grpc"