From 6b76759967d94a114631007904fc74440a70e129 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Thu, 7 May 2026 08:53:01 -0700 Subject: [PATCH] python-grpcio(-tools): add grpc:grpc to cve product These grpc python modules contain parts of grpc core. Each CVE needs to be assessed if the patch applies also to core parts included in each module. Note that so far there was never a CVE specific for python module, only for grpc:grpc and many of those needed to be fixed at leasts in grpcio: sqlite> select vendor, product, count(*) from products where product like '%grpc%' group by vendor, product; grpc|grpc|21 grpck|grpck|1 linuxfoundation|grpc_swift|9 microsoft|grpconv|1 opentelemetry|configgrpc|1 Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit f993cb2ecb62193bcce8d3d0e06e180a7fef44b8) Signed-off-by: Himanshu Jadon Signed-off-by: Anuj Mittal --- .../recipes-devtools/python/python3-grpcio-tools_1.62.2.bb | 2 ++ meta-python/recipes-devtools/python/python3-grpcio_1.62.2.bb | 2 ++ 2 files changed, 4 insertions(+) diff --git a/meta-python/recipes-devtools/python/python3-grpcio-tools_1.62.2.bb b/meta-python/recipes-devtools/python/python3-grpcio-tools_1.62.2.bb index 5b8bbe681a..7f842c01a9 100644 --- a/meta-python/recipes-devtools/python/python3-grpcio-tools_1.62.2.bb +++ b/meta-python/recipes-devtools/python/python3-grpcio-tools_1.62.2.bb @@ -21,3 +21,5 @@ do_compile:prepend() { } BBCLASSEXTEND = "native nativesdk" + +CVE_PRODUCT += "grpc:grpc" diff --git a/meta-python/recipes-devtools/python/python3-grpcio_1.62.2.bb b/meta-python/recipes-devtools/python/python3-grpcio_1.62.2.bb index 3581991a56..29c09675ef 100644 --- a/meta-python/recipes-devtools/python/python3-grpcio_1.62.2.bb +++ b/meta-python/recipes-devtools/python/python3-grpcio_1.62.2.bb @@ -51,3 +51,5 @@ CLEANBROKEN = "1" BBCLASSEXTEND = "native nativesdk" CCACHE_DISABLE = "1" + +CVE_PRODUCT += "grpc:grpc"