4 Commits

Author	SHA1	Message	Date
Peter Marko	57f075ca9b	python3-grpcio: set status for CVE-2023-33953 and CVE-2024-37168 ... CVE-2023-33953 is fixed since 1.56.2 per [1]. FKIE sets "defaultStatus": "unknown" so it needs to be set explicitly. CVE-2024-37168 description in [2] says grpc-js. Even if (like FKIE added) grpc core would be affected, it would be in old versions (also listed in [2]). [1] https://nvd.nist.gov/vuln/detail/CVE-2023-33953 [2] https://nvd.nist.gov/vuln/detail/CVE-2024-37168 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>	2026-07-20 23:08:11 -07:00
Khem Raj	8f3df8b447	recipes: Convert licenses to SPDX expressions ... - Automatically convert all licenses to valid SPDX license expressions using convert-spdx-licenses.py Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>	2026-07-20 22:35:47 -07:00
Gyorgy Sarvari	468ee626f8	python3-grpcio: ignore CVE-2026-33186 ... Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33186 The vulnerability only affects the Go implememtation of the library, not the Python one. Ignore this CVE due to this. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>	2026-04-20 07:35:37 -07:00
Andrej Kozemcak	94990de736	python3-grpcio: upgrade 1.76.0 -> 1.78.0 ... Change build tools from setuptools3 to python_setuptools_build_meta Add cython depends and change cython requirement from cython==3.1.1 to cython>=3.1.1. Currently we use cython version 3.2.4 Changelog: https://github.com/grpc/grpc/releases/tag/v1.78.0 Changes for python: - aio: fix race condition causing asyncio.run() to hang forever during the shutdown process. - Migrate to pyproject.toml build system from setup.py builds. - Log error details when ExecuteBatchError occurs (at DEBUG level). - Update setuptools min version to 77.0.1. Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>	2026-03-18 14:33:28 -07:00