All of lore.kernel.org
 help / color / mirror / Atom feed
* [meta-virtualization][PATCH 1/2] grpc-go: add grpc to CVE_PRODUCT
@ 2023-11-05 14:04 Peter Marko
  2023-11-05 14:04 ` [meta-virtualization][PATCH 2/2] grpc-go: Upgrade 1.41.0 -> 1.59.0 Peter Marko
  2023-11-07  1:50 ` [meta-virtualization][PATCH 1/2] grpc-go: add grpc to CVE_PRODUCT Bruce Ashfield
  0 siblings, 2 replies; 5+ messages in thread
From: Peter Marko @ 2023-11-05 14:04 UTC (permalink / raw)
  To: meta-virtualization; +Cc: Peter Marko

From: Peter Marko <peter.marko@siemens.com>

Some cves are reported with "cpe:2.3:a:grpc:grpc:*:*:*:*:*:go:*:*"
See https://nvd.nist.gov/vuln/detail/CVE-2023-44487

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 recipes-devtools/go/grpc-go_git.bb | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/recipes-devtools/go/grpc-go_git.bb b/recipes-devtools/go/grpc-go_git.bb
index d5bfaab9..b3b58ed4 100644
--- a/recipes-devtools/go/grpc-go_git.bb
+++ b/recipes-devtools/go/grpc-go_git.bb
@@ -39,3 +39,7 @@ go_grpc_sysroot_preprocess () {
 FILES:${PN} += " \
     ${prefix}/local/go/src/${PKG_NAME}/* \
 "
+
+# some CVEs are reported with "cpe:2.3:a:grpc:grpc:*:*:*:*:*:go:*:*"
+# it's better to have false positives than false negatives
+CVE_PRODUCT += "grpc"
-- 
2.30.2



^ permalink raw reply related	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2023-11-07  7:03 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2023-11-05 14:04 [meta-virtualization][PATCH 1/2] grpc-go: add grpc to CVE_PRODUCT Peter Marko
2023-11-05 14:04 ` [meta-virtualization][PATCH 2/2] grpc-go: Upgrade 1.41.0 -> 1.59.0 Peter Marko
2023-11-07  1:49   ` Bruce Ashfield
2023-11-07  7:02     ` [meta-virtualization][PATCH v2] " Peter Marko
2023-11-07  1:50 ` [meta-virtualization][PATCH 1/2] grpc-go: add grpc to CVE_PRODUCT Bruce Ashfield

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.