mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-06-13 17:39:57 +00:00
Code Issues Projects Releases Wiki Activity

grpc: set status for CVE-2026-33186

Browse Source 
CPE per NVD report is for "go", while this is C++ component:
* cpe:2.3:a:grpc:grpc:*:*:*:*:*:go:*:*
Also the link to adisory within NVD report says "grpc-go":
* https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Peter Marko
2026-04-12 17:37:04 +02:00
committed by Anuj Mittal
parent a1b14b7a3a
commit 0ef4a2ecee
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-oe/recipes-devtools/grpc/grpc_1.60.1.bb
+2
View File
@@ -67,3 +67,5 @@ FILES:${PN}-compiler += " \
${bindir} \ ${bindir} \
${libdir}/libgrpc_plugin_support${SOLIBS} \ ${libdir}/libgrpc_plugin_support${SOLIBS} \
" "
CVE_STATUS[CVE-2026-33186] = "cpe-incorrect: this CVE is for golang version of grpc"