oss-sec mailing list archives

Re: CVE Request: cgit directory traversal

From: "Jason A. Donenfeld" <Jason () zx2c4 com>
Date: Mon, 27 May 2013 23:44:56 +0200

On Mon, May 27, 2013 at 2:30 PM, Jan Lieskovsky <jlieskov () redhat com> wrote:

Can you provide a patch that would apply against v0.9.1 version too? Or
would this be just problem of master branch code?


I could, but you'd be much better off just upgrading to v0.9.2.

CVE Request: cgit directory traversal Jason A. Donenfeld (May 25)
- Re: CVE Request: cgit directory traversal Jan Lieskovsky (May 27)
  - Re: CVE Request: cgit directory traversal Kurt Seifried (May 27)
    - Re: CVE Request: cgit directory traversal Jason A. Donenfeld (May 27)
  - Re: CVE Request: cgit directory traversal Jason A. Donenfeld (May 27)