summaryrefslogtreecommitdiffstats
path: root/scripts
diff options
context:
space:
mode:
authorArchana Polampalli <archana.polampalli@windriver.com>2025-10-09 14:27:24 +0530
committerSteve Sakoman <steve@sakoman.com>2025-10-14 07:20:36 -0700
commitf63f49bdead2591f2fbbf9a732fbfdef5272bdfa (patch)
treeb5fd3fc6156ea553e95b2eb1e6031b4a44e4e87a /scripts
parent7a5c6b3e18171c4488fa56a20846a64bb15c966d (diff)
downloadpoky-f63f49bdead2591f2fbbf9a732fbfdef5272bdfa.tar.gz
go: fix CVE-2025-47906
If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned. (From OE-Core rev: c4d81e32ee3fb7d05db2cfbfaaa8081841bc16ce) Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions