Back to bug 1999755

Who When What Removed Added
Guilherme de Almeida Suckevicz 2021-08-31 17:16:09 UTC Blocks 1999757
Przemyslaw Roguski 2021-09-01 10:44:20 UTC CC abenaiss, aos-bugs, bmontgom, eparis, jburrell, jokerman, nstielau, pbhattac, sponnaga
RaTasha Tillery-Smith 2021-09-01 18:51:22 UTC Doc Text A flaw was found in git where it allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring. The highest threat from this vulnerability is to confidentiality.
Huzaifa S. Sidhpurwala 2021-10-05 04:53:42 UTC Depends On 2010570, 2010571, 2010572
Huzaifa S. Sidhpurwala 2021-10-05 04:56:58 UTC Fixed In Version git 2.30.1
Yasuhiro Ozone 2021-10-07 02:39:10 UTC CC yozone
Doran Moppert 2021-10-13 06:43:36 UTC CC dmoppert, juneau
Flags needinfo?(juneau)
Red Hat Bugzilla 2022-02-22 06:37:17 UTC Comment 1 updated
Comment 1 updated
Flags needinfo?(juneau)
Depends On 2017789
CC jnakfour
Red Hat Bugzilla 2022-06-30 22:49:37 UTC CC amahdal
Red Hat Bugzilla 2023-07-07 08:33:26 UTC Assignee security-response-team nobody

Back to bug 1999755