poky/meta/recipes-connectivity at yocto-3.1.32 - poky

mirror of https://git.yoctoproject.org/poky synced 2026-06-03 13:49:49 +00:00

Files

T

Ranjitsinh Rathod 3adc98348b openssh: Fix CVE-2023-51385

OS command injection might occur if a user name or host name has shell
metacharacters, and this name is referenced by an expansion token in
certain situations. For example, an untrusted Git repository can have a
submodule with shell metacharacters in a user name or host name.

This patch fixes the above issue

Link: http://archive.ubuntu.com/ubuntu/pool/main/o/openssh/openssh_8.2p1-4ubuntu0.11.debian.tar.xz
Link: https://github.com/openssh/openssh-portable/commit/7ef3787c84b6b524501211b11a26c742f829af1a

(From OE-Core rev: a0561ca36bd3be8f44d11908caaf8c9ce5f69032)

Signed-off-by: Ranjitsinh Rathod <ranjitsinh.rathod@kpit.com>
Signed-off-by: Ranjitsinh Rathod <ranjitsinhrathod1991@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2024-01-31 03:51:10 -10:00

avahi

avahi: backport Debian patches to fix multiple CVE's

2023-12-01 04:14:19 -10:00

bind

bind: Backport fix for CVE-2023-3341

2023-12-01 04:14:19 -10:00

bluez5

bluez5: fix CVE-2023-45866

2023-12-29 05:29:14 -10:00

connman

connman: Fix CVE-2023-28488 DoS in client.c