Files
poky/meta/recipes-devtools
Minjae Kim e006c87e22 git: fix CVE-2021-40330
git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character,
which may result in unexpected cross-protocol requests,
as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.

Upstream-Status: Backport [a02ea57717]
CVE: CVE-2021-40330
(From OE-Core rev: ea0d7ef4a8c9bba94bd603ebd19e502faa86293b)

Signed-off-by: Minjae Kim <flowergom@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2021-12-02 16:53:07 +00:00
..
2020-09-17 12:51:24 +01:00
2020-02-03 13:03:31 +00:00
2020-09-17 12:51:24 +01:00
2021-05-20 12:36:42 +01:00
2021-12-02 16:53:07 +00:00
2020-09-10 19:07:40 +01:00
2021-10-23 23:14:17 +01:00
2020-03-08 08:21:11 +00:00
2020-05-22 16:23:23 +01:00
2021-01-09 09:17:17 +00:00
2021-06-03 16:30:56 +01:00
2021-11-15 11:53:55 +00:00
2021-12-02 16:53:07 +00:00
2021-09-30 00:02:22 +01:00
2021-08-18 18:00:19 +01:00
2021-05-20 12:36:41 +01:00
2021-03-18 21:20:24 +00:00
2021-06-19 16:59:29 +01:00