Lucene search

K
suseSuseOPENSUSE-SU-2018:2313-1
HistoryAug 13, 2018 - 6:09 p.m.

Security update for cgit (moderate)

2018-08-1318:09:24
lists.opensuse.org
67

0.963 High

EPSS

Percentile

99.5%

This update for cgit to version 1.2.1 fixes the following issues:

The following security vulnerability was addressed:

  • CVE-2018-14912: Fixed a directory traversal vulnerability, when
    enable-http-clone=1 is not turned off (boo#1103799)

The following other changes were made:

  • Update to upstream release 1.2.1:

    • syntax-highlighting: replace invalid unicode with ‘?’
    • ui-repolist: properly sort by age
    • ui-patch: fix crash when using path limit
  • Update bundled git to 2.11.1

  • Update to upstream release 1.0:

    • Add repo.homepage/gitweb.homepage setting and homepage tab.
    • Show reverse paths in title bar so that browser tab shows filename.
    • Allow redirects even when caching is turned on.
    • More gracefully deal with unparsable commits.