mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-27 20:07:25 +00:00
Peter Marko
57f075ca9b
CVE-2023-33953 is fixed since 1.56.2 per [1]. FKIE sets "defaultStatus": "unknown" so it needs to be set explicitly. CVE-2024-37168 description in [2] says grpc-js. Even if (like FKIE added) grpc core would be affected, it would be in old versions (also listed in [2]). [1] https://nvd.nist.gov/vuln/detail/CVE-2023-33953 [2] https://nvd.nist.gov/vuln/detail/CVE-2024-37168 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>