diff options
| author | Peter Marko <peter.marko@siemens.com> | 2023-11-05 15:04:28 +0100 |
|---|---|---|
| committer | Bruce Ashfield <bruce.ashfield@gmail.com> | 2023-11-07 13:22:17 +0000 |
| commit | 11d15351a2fece06ac7d191007f8e02f6df51878 (patch) | |
| tree | a5d636faa76d7b5eed908f7903e13257899b6820 | |
| parent | 92a7e8ec4639be5c0d6988353c649949d7e17f83 (diff) | |
| download | meta-virtualization-11d15351a2fece06ac7d191007f8e02f6df51878.tar.gz | |
grpc-go: add grpc to CVE_PRODUCT
Some cves are reported with "cpe:2.3:a:grpc:grpc:*:*:*:*:*:go:*:*"
See https://nvd.nist.gov/vuln/detail/CVE-2023-44487
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
| -rw-r--r-- | recipes-devtools/go/grpc-go_git.bb | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/recipes-devtools/go/grpc-go_git.bb b/recipes-devtools/go/grpc-go_git.bb index d5bfaab9..b3b58ed4 100644 --- a/recipes-devtools/go/grpc-go_git.bb +++ b/recipes-devtools/go/grpc-go_git.bb | |||
| @@ -39,3 +39,7 @@ go_grpc_sysroot_preprocess () { | |||
| 39 | FILES:${PN} += " \ | 39 | FILES:${PN} += " \ |
| 40 | ${prefix}/local/go/src/${PKG_NAME}/* \ | 40 | ${prefix}/local/go/src/${PKG_NAME}/* \ |
| 41 | " | 41 | " |
| 42 | |||
| 43 | # some CVEs are reported with "cpe:2.3:a:grpc:grpc:*:*:*:*:*:go:*:*" | ||
| 44 | # it's better to have false positives than false negatives | ||
| 45 | CVE_PRODUCT += "grpc" | ||