4 Commits

Author SHA1 Message Date
Peter Marko
0ef4a2ecee grpc: set status for CVE-2026-33186
CPE per NVD report is for "go", while this is C++ component:
* cpe:2.3🅰️grpc:grpc:*:*:*:*:*:go:*:*
Also the link to adisory within NVD report says "grpc-go":
* https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-04-15 14:12:18 +05:30
Peter Marko
6e917b832d grpc: patch CVE-2024-11407
Cherry-pick commit [1] mentioned in [2].

[1] e9046b2bbe
[2] https://nvd.nist.gov/vuln/detail/CVE-2024-11407

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2025-01-20 19:45:30 -05:00
Libo Chen
85d783a457 grpc: Fix CVE-2024-7246
Backport patches [1] to fix CVE-2024-7246.

[1] https://github.com/grpc/grpc/pull/37361/files

Signed-off-by: Libo Chen <libo.chen.cn@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-12-15 14:05:17 -05:00
Xiangyu Chen
b189404251
grpc: upgrade 1.60.0 -> 1.60.1
Changelog:
==========
[Python Misc] Revert change to print backtrace in server
[PSM Interop] Use the Kokoro shared install lib from the new repo

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2024-02-29 18:47:47 -08:00