mirrors/meta-openembedded
1
0 Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-11-14 03:57:15 +00:00
Code Issues Projects Releases Wiki Activity

python3-grpcio-tools: set status for CVE-2024-37168

Browse Source 
CVE-2024-37168 affects @grpc/grpc-js, the pure JavaScript
implementation, not the gRPC core code included in grpcio-tools.
Therefore the grpc:grpc CPE association is incorrect.

[1] https://nvd.nist.gov/vuln/detail/CVE-2024-37168

Signed-off-by: Hetvi Thakar <hthakar@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Hetvi Thakar authored and Anuj Mittal committed 2026-10-28 12:31:32 +05:30
1 parent 785cc82130
commit 594491969e
1 file changed
+1
Download Patch File Download Diff File Expand all files Collapse all files
meta-python/recipes-devtools/python/python3-grpcio-tools_1.76.0.bb
+1
View File
@@ -27,3 +27,4 @@ BBCLASSEXTEND = "native nativesdk"
CVE_PRODUCT += "grpc:grpc"
CVE_STATUS[CVE-2023-33953] = "fixed-version: Fixed since 1.56.2"
CVE_STATUS[CVE-2024-37168] = "cpe-incorrect: affects @grpc/grpc-js, not gRPC core"