mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-08-30 00:33:19 +00:00
Code Issues Projects Releases Wiki Activity

protobuf: set status for CVE-2024-7254

Browse Source 
Version 4.28.2 is correctly set in [1].
Unfortunately also protoc version 28.2 with the same CPE is mentioned
which creates a false positive which needs to be handled.

[1] https://github.com/CVEProject/cvelistV5/blob/main/cves/2024/7xxx/CVE-2024-7254.json

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Peter Marko
2026-07-20 21:28:06 +02:00
committed by Anuj Mittal
parent 584a16a0b7
commit a61a69e40e
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-oe/recipes-devtools/protobuf/protobuf_6.33.6.bb
+2
View File
@@ -129,3 +129,5 @@ RDEPENDS:${PN}-ptest = "bash ${@bb.utils.contains('PACKAGECONFIG', 'python', 'py
MIPS_INSTRUCTION_SET = "mips"
BBCLASSEXTEND = "native nativesdk"
CVE_STATUS[CVE-2024-7254] = "fixed-version: Fixed since 4.28.2"