diff options
| author | Archana Polampalli <archana.polampalli@windriver.com> | 2025-04-02 11:45:32 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-04-16 06:41:24 -0700 |
| commit | 60feedab223cc7adee7eb56d13ae4e7f301ae9f1 (patch) | |
| tree | f0d3d704fb88a5ae1856d00efe11a4861b5e65b4 /scripts/lib/checklayer/context.py | |
| parent | 92c44bc7888a1606434fceb7576b4dd05e8569a9 (diff) | |
| download | poky-60feedab223cc7adee7eb56d13ae4e7f301ae9f1.tar.gz | |
go: fix CVE-2025-22870
Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID
as a hostname component. For example, when the NO_PROXY environment variable
is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly
match and not be proxied.
(From OE-Core rev: 88e79f915137edc5a37a110abdc79f5800404e45)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/lib/checklayer/context.py')
0 files changed, 0 insertions, 0 deletions