diff options
| author | Gyorgy Sarvari <skandigraun@gmail.com> | 2026-04-24 00:48:15 +1200 |
|---|---|---|
| committer | Anuj Mittal <anuj.mittal@oss.qualcomm.com> | 2026-05-08 07:22:44 +0530 |
| commit | 850b7f6fd7a48186a4738d4e92907d6eb44f0aaa (patch) | |
| tree | 8983589e4364d1eac86c99147ef15bf2e174e87d /meta-python | |
| parent | d91b26edec40454af69dab6f6d2b8c59ec065b78 (diff) | |
| download | meta-openembedded-850b7f6fd7a48186a4738d4e92907d6eb44f0aaa.tar.gz | |
protobuf, python3-protobuf: ignore CVE-2026-6409
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409
The vulnerability impacts only the PHP library component, not the
cpp/python one. Ignore this CVE due to this.
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit aef8bc34225cd0a56057749d0db1dfac773b17cb)
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
Diffstat (limited to 'meta-python')
| -rw-r--r-- | meta-python/recipes-devtools/python/python3-protobuf_6.33.5.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta-python/recipes-devtools/python/python3-protobuf_6.33.5.bb b/meta-python/recipes-devtools/python/python3-protobuf_6.33.5.bb index af9ff85f20..3abee615d5 100644 --- a/meta-python/recipes-devtools/python/python3-protobuf_6.33.5.bb +++ b/meta-python/recipes-devtools/python/python3-protobuf_6.33.5.bb | |||
| @@ -14,6 +14,7 @@ SRC_URI[sha256sum] = "6ddcac2a081f8b7b9642c09406bc6a4290128fce5f471cddd165960bb9 | |||
| 14 | 14 | ||
| 15 | CVE_PRODUCT += "google:protobuf protobuf:protobuf google-protobuf protobuf-python" | 15 | CVE_PRODUCT += "google:protobuf protobuf:protobuf google-protobuf protobuf-python" |
| 16 | CVE_STATUS[CVE-2026-0994] = "fixed-version: it is fixed in 6.33.5" | 16 | CVE_STATUS[CVE-2026-0994] = "fixed-version: it is fixed in 6.33.5" |
| 17 | CVE_STATUS[CVE-2026-6409] = "cpe-incorrect: the vulnerability affects only the php library" | ||
| 17 | 18 | ||
| 18 | # http://errors.yoctoproject.org/Errors/Details/184715/ | 19 | # http://errors.yoctoproject.org/Errors/Details/184715/ |
| 19 | # Can't find required file: ../src/google/protobuf/descriptor.proto | 20 | # Can't find required file: ../src/google/protobuf/descriptor.proto |