From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id D00D7FF60C5 for ; Tue, 31 Mar 2026 04:11:39 +0000 (UTC) Subject: Re: [meta-python][kirkstone][PATCH] python3-protobuf: ignore CVE-2024-7254 To: openembedded-devel@lists.openembedded.org From: "Naman Jain" X-Originating-Location: Pune, Maharashtra, IN (152.58.31.76) X-Originating-Platform: Android Phone Chrome 146 User-Agent: GROUPS.IO Web Poster MIME-Version: 1.0 Date: Mon, 30 Mar 2026 21:11:33 -0700 References: <20260330065150.2931505-1-naman.jain@partner.bmw.de> <5fd5bee4-3884-44f4-bfee-c7bb30ce5b7f@gmail.com> In-Reply-To: <5fd5bee4-3884-44f4-bfee-c7bb30ce5b7f@gmail.com> Message-ID: <173697.1774930293870342157@lists.openembedded.org> Content-Type: multipart/alternative; boundary="ED2Qey6UfoJwcfy5Jfw9" List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Tue, 31 Mar 2026 04:11:39 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/125870 --ED2Qey6UfoJwcfy5Jfw9 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello, Please note that protobuf_3.19.6 in kirkstone uses java implementation and = already has a patch for CVE-2024-7254 Ref: https://git.openembedded.org/meta-openembedded/commit/?h=3Dkirkstone&i= d=3Df17b6e36fc2eef7f24d08885c50732d62f2754e5 Thanks and Regards, Naman jain --ED2Qey6UfoJwcfy5Jfw9 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable
Hello,
Please note that protobuf_3.19.6 in kirkstone uses java implementation= and already has a patch for CVE-2024-7254