mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-28 18:21:06 -09:00
b4ec1573e1
Fixes the following security issues: * CVE-2023-22490: Using a specially-crafted repository, Git can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort local clones whose source $GIT_DIR/objects directory contains symbolic links (c.f., CVE-2022-39253), the objects directory itself may still be a symbolic link. These two may be combined to include arbitrary files based on known paths on the victim's filesystem within the malicious repository's working copy, allowing for data exfiltration in a similar manner as CVE-2022-39253. * CVE-2023-23946: By feeding a crafted input to "git apply", a path outside the working tree can be overwritten as the user who is running "git apply". For more details, see the announcement: https://lore.kernel.org/git/xmqqr0us5dio.fsf@gitster.g/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
6 lines
345 B
Plaintext
6 lines
345 B
Plaintext
# From: https://www.kernel.org/pub/software/scm/git/sha256sums.asc
|
|
sha256 30674629605a12d3ef4f9c752d5561862f04a48952b1799b9815f9884e4e0f6d git-2.31.7.tar.xz
|
|
# Locally calculated
|
|
sha256 5b2198d1645f767585e8a88ac0499b04472164c0d2da22e75ecf97ef443ab32e COPYING
|
|
sha256 1922f45d2c49e390032c9c0ba6d7cac904087f7cec51af30c2b2ad022ce0e76a LGPL-2.1
|