diff mbox series

[meta-oe,kirkstone] grpc: ignore CVE-2023-32732

Message ID 20230628094937.15500-1-peter.marko@siemens.com
State New
Headers show
Series [meta-oe,kirkstone] grpc: ignore CVE-2023-32732 | expand

Commit Message

Peter Marko June 28, 2023, 9:49 a.m. UTC 
From: Peter Marko <peter.marko@siemens.com>

It was introduced in in v1.53.0 and not backported to v1.46.x branch.
NVD references PR which intrioduces the vulnerability:
  https://github.com/grpc/grpc/pull/32309#issuecomment-1589561295

Signed-off-by: Peter Marko <peter.marko@siemens.com>
---
 meta-oe/recipes-devtools/grpc/grpc_1.46.7.bb | 3 +++
 1 file changed, 3 insertions(+)
diff mbox series

Patch

diff --git a/meta-oe/recipes-devtools/grpc/grpc_1.46.7.bb b/meta-oe/recipes-devtools/grpc/grpc_1.46.7.bb
index 15bf05919b..ab6f6e46cd 100644
--- a/meta-oe/recipes-devtools/grpc/grpc_1.46.7.bb
+++ b/meta-oe/recipes-devtools/grpc/grpc_1.46.7.bb
@@ -66,3 +66,6 @@  FILES:${PN}-compiler += " \
     ${bindir} \
     ${libdir}/libgrpc_plugin_support${SOLIBS} \
     "
+
+# this CVE was introduced in v1.53.0 and not backported to v1.46.x branch
+CVE_CHECK_IGNORE += "CVE-2023-32732"