mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-13 17:39:57 +00:00
grpc: set status for CVE-2026-33186
CPE per NVD report is for "go", while this is C++ component: * cpe:2.3:a:grpc:grpc:*:*:*:*:*:go:*:* Also the link to adisory within NVD report says "grpc-go": * https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
@@ -67,3 +67,5 @@ FILES:${PN}-compiler += " \
|
||||
${bindir} \
|
||||
${libdir}/libgrpc_plugin_support${SOLIBS} \
|
||||
"
|
||||
|
||||
CVE_STATUS[CVE-2026-33186] = "cpe-incorrect: this CVE is for golang version of grpc"
|
||||
|
||||
Reference in New Issue
Block a user