Ranjitsinh Rathod 3adc98348b openssh: Fix CVE-2023-51385 ...

OS command injection might occur if a user name or host name has shell
metacharacters, and this name is referenced by an expansion token in
certain situations. For example, an untrusted Git repository can have a
submodule with shell metacharacters in a user name or host name.

This patch fixes the above issue

Link: http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh_8.2p1-4ubuntu0.11.debian.tar.xz
Link: 7ef3787c84

(From OE-Core rev: a0561ca36bd3be8f44d11908caaf8c9ce5f69032)

Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com>
Signed-off-by: Ranjitsinh Rathod <ranjitsinhrathod1991@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2024-01-31 03:51:10 -10:00

..

openssh

openssh: Fix CVE-2023-51385

2024-01-31 03:51:10 -10:00

openssh_8.2p1.bb

openssh: Fix CVE-2023-51385

2024-01-31 03:51:10 -10:00