mirrors/meta-openembedded
1
0 Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-11-14 03:57:15 +00:00
Code Issues Projects Releases Wiki Activity

python3-grpcio-tools: set status for CVE-2026-33186

Browse Source 
The vulnerability only affects the Go implementation of the library,
not the Python one. Ignore this CVE due to this.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2026-33186
https://github.com/advisories/GHSA-p77j-4mvh-x3m3

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Hetvi Thakar authored and Anuj Mittal committed 2026-10-28 12:31:33 +05:30
1 parent 594491969e
commit 36cb562576
1 file changed
+1
Download Patch File Download Diff File Expand all files Collapse all files
meta-python/recipes-devtools/python/python3-grpcio-tools_1.76.0.bb
+1
View File
@@ -28,3 +28,4 @@ BBCLASSEXTEND = "native nativesdk"
CVE_PRODUCT += "grpc:grpc"
CVE_STATUS[CVE-2023-33953] = "fixed-version: Fixed since 1.56.2"
CVE_STATUS[CVE-2024-37168] = "cpe-incorrect: affects @grpc/grpc-js, not gRPC core"
CVE_STATUS[CVE-2026-33186] = "cpe-incorrect: affects gRPC-Go, not Python grpcio-tools"