From e231647a9b34baec729fb2a09a544d4335565701 Mon Sep 17 00:00:00 2001 From: Peter Marko Date: Mon, 5 Jan 2026 09:31:57 +0100 Subject: python-grpcio(-tools): add grpc:grpc to cve product These grpc python modules contain parts of grpc core. Each CVE needs to be assessed if the patch applies also to core parts included in each module. Note that so far there was never a CVE specific for python module, only for grpc:grpc and many of those needed to be fixed at leasts in grpcio: sqlite> select vendor, product, count(*) from products where product like '%grpc%' group by vendor, product; grpc|grpc|21 grpck|grpck|1 linuxfoundation|grpc_swift|9 microsoft|grpconv|1 opentelemetry|configgrpc|1 Signed-off-by: Peter Marko Signed-off-by: Khem Raj (cherry picked from commit f993cb2ecb62193bcce8d3d0e06e180a7fef44b8) Signed-off-by: Gyorgy Sarvari --- meta-python/recipes-devtools/python/python3-grpcio-tools_1.45.0.bb | 2 ++ meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb | 2 ++ 2 files changed, 4 insertions(+) (limited to 'meta-python/recipes-devtools/python') diff --git a/meta-python/recipes-devtools/python/python3-grpcio-tools_1.45.0.bb b/meta-python/recipes-devtools/python/python3-grpcio-tools_1.45.0.bb index be851ba990..1f74d25aee 100644 --- a/meta-python/recipes-devtools/python/python3-grpcio-tools_1.45.0.bb +++ b/meta-python/recipes-devtools/python/python3-grpcio-tools_1.45.0.bb @@ -19,3 +19,5 @@ do_compile:prepend() { } BBCLASSEXTEND = "native nativesdk" + +CVE_PRODUCT += "grpc:grpc" diff --git a/meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb b/meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb index 56b84dab72..2671e5c738 100644 --- a/meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb +++ b/meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb @@ -47,4 +47,6 @@ CLEANBROKEN = "1" BBCLASSEXTEND = "native nativesdk" +CVE_PRODUCT += "grpc:grpc" + CCACHE_DISABLE = "1" -- cgit v1.2.3-54-g00ecf