mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-06-17 18:59:53 +00:00
Sudhir Dumbhare
90446e0fd3
Analysis: - CVE-2024-7246 [4] affects gRPC-C++ CHTTP2 HPACK parser error handling. - The upstream fix from v1.62.3 [1] modifies gRPC core runtime source src/core/ext/transport/chttp2/transport/hpack_parser.cc. aligned with the original fix in v1.60.2 [2] as referenced in [3]. - python3-grpcio-tools does not include or compile this runtime source. - Hence CVE-2024-7246 is not applicable to python3-grpcio-tools. [1] https://github.com/grpc/grpc/commit/1d172cfca56440889ca32ae516b8c2767321f5b5 [2] https://github.com/grpc/grpc/commit/88b1244fd43e81860baa60cc7fb3945a2cca0d11 [3] https://bugzilla.suse.com/show_bug.cgi?id=1228919 [4] https://nvd.nist.gov/vuln/detail/CVE-2024-7246 Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Collection of layers for the OE-core universe
Main layer maintainer: Anuj Mittal anuj.mittal@oss.qualcomm.com
This repository is a collection of layers to suppliment OE-Core with additional packages, Each layer have designated maintainer Please see the respective READMEs in the layer subdirectories