 Peter Marko
|
15ea815f61
|
python3-protobuf: set status for CVE-2024-7254
Version 4.28.2 is correctly set in [1].
Unfortunately also protoc version 28.2 with the same CPE is mentioned
which creates a false positive which needs to be handled.
[1] https://github.com/CVEProject/cvelistV5/blob/main/cves/2024/7xxx/CVE-2024-7254.json
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
|
2026-07-22 06:33:02 +05:30 |
|
 Gyorgy Sarvari
|
aef8bc3422
|
protobuf, python3-protobuf: ignore CVE-2026-6409
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409
The vulnerability impacts only the PHP library component, not the
cpp/python one. Ignore this CVE due to this.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
|
2026-04-20 07:35:37 -07:00 |
|
|
Peter Marko
|
7dd437eb03
|
python3-protobuf: upgrade 6.33.5 -> 6.33.6
Release information [1] does not list python changes, but we should
match protobuf (C++) recipe version.
[1] https://github.com/protocolbuffers/protobuf/releases/tag/v33.6
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
|
2026-03-23 13:34:20 -07:00 |
|