From f977d712455411c091aeee04ea7096d9e8c5b563 Mon Sep 17 00:00:00 2001 From: Hitendra Prajapati Date: Thu, 27 Oct 2022 17:12:51 +0530 Subject: golang: CVE-2022-2880 ReverseProxy should not forward unparseable query parameters Upstream-Status: Backport from https://github.com/golang/go/commit/9d2c73a9fd69e45876509bb3bdb2af99bf77da1e Signed-off-by: Hitendra Prajapati Signed-off-by: Steve Sakoman --- meta/recipes-devtools/go/go-1.14.inc | 1 + 1 file changed, 1 insertion(+) (limited to 'meta/recipes-devtools/go/go-1.14.inc') diff --git a/meta/recipes-devtools/go/go-1.14.inc b/meta/recipes-devtools/go/go-1.14.inc index 2e1d8240f6..3341beb159 100644 --- a/meta/recipes-devtools/go/go-1.14.inc +++ b/meta/recipes-devtools/go/go-1.14.inc @@ -41,6 +41,7 @@ SRC_URI += "\ file://0002-CVE-2022-32190.patch \ file://0003-CVE-2022-32190.patch \ file://0004-CVE-2022-32190.patch \ + file://CVE-2022-2880.patch \ " SRC_URI_append_libc-musl = " file://0009-ld-replace-glibc-dynamic-linker-with-musl.patch" -- cgit 1.2.3-korg