TEMP-0000000-1CC548

NameTEMP-0000000-1CC548
DescriptionCross-site scripting (XSS) vulnerability in cgit's "txt2html" filter
SourceAutomatically generated temporary name. Not for external reference.

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cgit (PTS)stretch (security), stretch1.1+git2.10.2-3+deb9u1fixed
buster1.2.1+git2.18.0-1fixed
bullseye, sid1.2.3+git2.25.1-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cgitsourcejessie0.10.2.git2.0.1-3+deb8u1
cgitsource(unstable)0.12.0.git2.7.0-1

Notes

https://git.zx2c4.com/cgit/commit/filters/html-converters/txt2html?id=13c2d3df0440ce04273de3149631a9bd97490c6e
CVE Request: https://www.openwall.com/lists/oss-security/2016/03/05/8

Search for package or bug name: Reporting problems