CVE-2026-5222: avoid stripping .git suffix when for non git registries
authorArlo Siemsen <arkixml@gmail.com>
Mon, 25 May 2026 07:49:43 +0000 (09:49 +0200)
committerFabian Grünbichler <debian@fabian.gruenbichler.email>
Fri, 24 Jul 2026 16:02:33 +0000 (18:02 +0200)
commit37ad59f3ec8f7f0764c089aac82663cf383c96de
treedb0ecfd6dc1efa5f3405994522fdffe1a260126d
parent2870fbdebed12edaa88e9f80c3a62c95708c60e5
CVE-2026-5222: avoid stripping .git suffix when for non git registries

FG: backported from 1.96.0

Signed-off-by: Fabian Grünbichler <git@fabian.gruenbichler.email>
Gbp-Pq: Topic cargo
Gbp-Pq: Name CVE-2026-5222-avoid-stripping-.git-suffix-when-for-non-gi.patch
src/tools/cargo/src/cargo/sources/git/source.rs
src/tools/cargo/src/cargo/util/canonical_url.rs