diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-04-20 11:33:18 +0200 |
|---|---|---|
| committer | Khem Raj <khem.raj@oss.qualcomm.com> | 2026-04-20 07:35:37 -0700 |
| commit | aef8bc34225cd0a56057749d0db1dfac773b17cb (patch) | |
| tree | a6e8ea16be6f56b6a9b4465a191f43cb5898df9c /meta-python/recipes-devtools | |
| parent | 09050325e6e0736beccc40d125e56430054b7cb8 (diff) | |
| download | meta-openembedded-aef8bc34225cd0a56057749d0db1dfac773b17cb.tar.gz | |
protobuf, python3-protobuf: ignore CVE-2026-6409
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409
The vulnerability impacts only the PHP library component, not the
cpp/python one. Ignore this CVE due to this.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Diffstat (limited to 'meta-python/recipes-devtools')
| -rw-r--r-- | meta-python/recipes-devtools/python/python3-protobuf_6.33.6.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-protobuf_6.33.6.bb b/meta-python/recipes-devtools/python/python3-protobuf_6.33.6.bb index bbc713442b..0595ec2a47 100644 --- a/meta-python/recipes-devtools/python/python3-protobuf_6.33.6.bb +++ b/meta-python/recipes-devtools/python/python3-protobuf_6.33.6.bb | |||
| @@ -14,6 +14,7 @@ SRC_URI[sha256sum] = "a6768d25248312c297558af96a9f9c929e8c4cee0659cb07e780731095 | |||
| 14 | 14 | ||
| 15 | CVE_PRODUCT += "google:protobuf protobuf:protobuf google-protobuf protobuf-python" | 15 | CVE_PRODUCT += "google:protobuf protobuf:protobuf google-protobuf protobuf-python" |
| 16 | CVE_STATUS[CVE-2026-0994] = "fixed-version: it is fixed in 6.33.5" | 16 | CVE_STATUS[CVE-2026-0994] = "fixed-version: it is fixed in 6.33.5" |
| 17 | CVE_STATUS[CVE-2026-6409] = "cpe-incorrect: the vulnerability affects only the php library" | ||
| 17 | 18 | ||
| 18 | # http://errors.yoctoproject.org/Errors/Details/184715/ | 19 | # http://errors.yoctoproject.org/Errors/Details/184715/ |
| 19 | # Can't find required file: ../src/google/protobuf/descriptor.proto | 20 | # Can't find required file: ../src/google/protobuf/descriptor.proto |