Security update for cgit (moderate)

2018-08-1315:07:39

lists.opensuse.org

0.963 High

EPSS

Percentile

99.5%

JSON

This update for cgit fixes the following issues:

The following security vulnerability was addressed:

CVE-2018-14912: Fixed a directory traversal vulnerability, when
enable-http-clone=1 is not turned off (boo#1103799)

The following other changes were made:

Update to upstream release 1.2.1
- syntax-highlighting: replace invalid unicode with ‘?’
- ui-repolist: properly sort by age
- ui-patch: fix crash when using path limit

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.0x86_64cgit-debugsource< 1.2.1-lp150.2.3.1cgit-debugsource-1.2.1-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0x86_64cgit< 1.2.1-lp150.2.3.1cgit-1.2.1-lp150.2.3.1.x86_64.rpm
openSUSE Leap15.0x86_64cgit-debuginfo< 1.2.1-lp150.2.3.1cgit-debuginfo-1.2.1-lp150.2.3.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE Leap	15.0	x86_64	cgit-debugsource	< 1.2.1-lp150.2.3.1	cgit-debugsource-1.2.1-lp150.2.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	cgit	< 1.2.1-lp150.2.3.1	cgit-1.2.1-lp150.2.3.1.x86_64.rpm
openSUSE Leap	15.0	x86_64	cgit-debuginfo	< 1.2.1-lp150.2.3.1	cgit-debuginfo-1.2.1-lp150.2.3.1.x86_64.rpm