faadc555ea
protobuf: set status for CVE-2024-7254
...
Version 4.28.2 is correctly set in [1].
Unfortunately also protoc version 28.2 with the same CPE is mentioned
which creates a false positive which needs to be handled.
[1] https://github.com/CVEProject/cvelistV5/blob/main/cves/2024/7xxx/CVE-2024-7254.json
Signed-off-by: Peter Marko <peter.marko@siemens.com >
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com >
2026-07-20 23:08:11 -07:00
8f3df8b447
recipes: Convert licenses to SPDX expressions
...
- Automatically convert all licenses to valid SPDX license expressions
using convert-spdx-licenses.py
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com >
2026-07-20 22:35:47 -07:00
aef8bc3422
protobuf, python3-protobuf: ignore CVE-2026-6409
...
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409
The vulnerability impacts only the PHP library component, not the
cpp/python one. Ignore this CVE due to this.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com >
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com >
2026-04-20 07:35:37 -07:00
77ea4610d8
protobuf: disable ptests for now
...
oe-core just moved from pkgconfig to pkgconf, which has broken the
ptest buikd due to how fragile the compilation was.
This will be revisited to build the tests properly, but for now simply
disable the ptests.
Signed-off-by: Ross Burton <ross.burton@arm.com >
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com >
2026-03-24 09:13:49 -07:00
aee9d873f7
protobuf: Upgrade to 6.33.6
...
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com >
2026-03-20 18:29:28 -07:00
Peter Marko
Khem Raj
Gyorgy Sarvari
Ross Burton