diff mbox series

[meta-python,kirkstone,1/5] python-grpcio(-tools): add grpc:grpc to cve product

Message ID 20260105083201.1225143-1-skandigraun@gmail.com
State New
Headers show
Series [meta-python,kirkstone,1/5] python-grpcio(-tools): add grpc:grpc to cve product | expand

Commit Message

Gyorgy Sarvari Jan. 5, 2026, 8:31 a.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

These grpc python modules contain parts of grpc core.
Each CVE needs to be assessed if the patch applies also to core parts
included in each module.

Note that so far there was never a CVE specific for python module, only
for grpc:grpc and many of those needed to be fixed at leasts in grpcio:

sqlite> select vendor, product, count(*) from products where product like '%grpc%' group by vendor, product;
grpc|grpc|21
grpck|grpck|1
linuxfoundation|grpc_swift|9
microsoft|grpconv|1
opentelemetry|configgrpc|1

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit f993cb2ecb62193bcce8d3d0e06e180a7fef44b8)
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 .../recipes-devtools/python/python3-grpcio-tools_1.45.0.bb      | 2 ++
 meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb    | 2 ++
 2 files changed, 4 insertions(+)
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-grpcio-tools_1.45.0.bb b/meta-python/recipes-devtools/python/python3-grpcio-tools_1.45.0.bb
index be851ba990..1f74d25aee 100644
--- a/meta-python/recipes-devtools/python/python3-grpcio-tools_1.45.0.bb
+++ b/meta-python/recipes-devtools/python/python3-grpcio-tools_1.45.0.bb
@@ -19,3 +19,5 @@  do_compile:prepend() {
 }
 
 BBCLASSEXTEND = "native nativesdk"
+
+CVE_PRODUCT += "grpc:grpc"
diff --git a/meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb b/meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb
index 56b84dab72..2671e5c738 100644
--- a/meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb
+++ b/meta-python/recipes-devtools/python/python3-grpcio_1.45.0.bb
@@ -47,4 +47,6 @@  CLEANBROKEN = "1"
 
 BBCLASSEXTEND = "native nativesdk"
 
+CVE_PRODUCT += "grpc:grpc"
+
 CCACHE_DISABLE = "1"