git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit

author	Hitendra Prajapati <hprajapati@mvista.com>
	Fri, 24 Jun 2022 12:12:53 +0000 (17:42 +0530)
committer	Steve Sakoman <steve@sakoman.com>
	Fri, 24 Jun 2022 17:16:22 +0000 (07:16 -1000)
commit	2850ef58f2a39a5ab19b1062d1b50160fec4daa8
tree	992e2127dd776f0278a0ea4efc76726077418262	tree
parent	6625e24a6143765ce2e4e08d25e3fe021bc2cdf6	commit \| diff

golang: CVE-2021-31525 net/http: panic in ReadRequest and ReadResponse when reading a very large header

Source: https://github.com/argoheyard/lang-net
MR: 114874
Type: Security Fix
Disposition: Backport from https://github.com/argoheyard/lang-net/commit/701957006ef151feb43f86aa99c8a1f474f69282
ChangeID: bd3c4f9f44dd1c45e810172087004778522d28eb
Description:
CVE-2021-31525 golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header.

Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

meta/recipes-devtools/go/go-1.14.inc		diff \| blob \| blame \| history
meta/recipes-devtools/go/go-1.14/CVE-2021-31525.patch	[new file with mode: 0644]	blob