mirror of
https://git.yoctoproject.org/poky
synced 2026-09-20 12:49:33 +02:00
7be1953871
This patch applies the upstream 3.1.49 backport for CVE-2026-44244. The upstream fix merge is referenced in [1], and the public CVE advisory is referenced in [2]. The individual backported commits are referenced in [3] and [4]. [1]b049a13105[2] https://nvd.nist.gov/vuln/detail/CVE-2026-44244 [3]c417af469f[4]8e24503b42(From OE-Core rev: 9aaa23d4f6c04049fcdb532f6a83c654e8e6e15d) Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
31 lines
1.1 KiB
Diff
31 lines
1.1 KiB
Diff
From cf273ba3958ad02afa361167a0d0f82e1f4b5f4d Mon Sep 17 00:00:00 2001
|
|
From: "GPT 5.5" <codex@openai.com>
|
|
Date: Wed, 29 Apr 2026 06:39:02 +0800
|
|
Subject: [PATCH] avoid duplicate validation in set_value
|
|
|
|
CVE: CVE-2026-44244
|
|
Upstream-Status: Backport [https://github.com/gitpython-developers/GitPython/commit/8e24503b42c1d63dd98e8b2e6a2f655bdd0821e3]
|
|
|
|
Co-authored-by: Sebastian Thiel <sebastian.thiel@icloud.com>
|
|
(cherry picked from commit 8e24503b42c1d63dd98e8b2e6a2f655bdd0821e3)
|
|
Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
|
|
---
|
|
git/config.py | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
diff --git a/git/config.py b/git/config.py
|
|
index ce307110..7988f5d9 100644
|
|
--- a/git/config.py
|
|
+++ b/git/config.py
|
|
@@ -876,7 +876,7 @@ class GitConfigParser(cp.RawConfigParser, metaclass=MetaParserBuilder):
|
|
value_str = self._value_to_string_safe(value)
|
|
if not self.has_section(section):
|
|
self.add_section(section)
|
|
- self.set(section, option, value_str)
|
|
+ super().set(section, option, value_str)
|
|
return self
|
|
|
|
@needs_values
|
|
--
|
|
2.35.6
|