TEMP-0000000-1CC548

NameTEMP-0000000-1CC548
DescriptionCross-site scripting (XSS) vulnerability in cgit's "txt2html" filter
SourceAutomatically generated temporary name. Not for external reference.

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cgit (PTS)jessie (security), jessie0.10.2.git2.0.1-3+deb8u1fixed
buster, stretch, sid1.1+git2.10.2-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cgitsource(unstable)0.12.0.git2.7.0-1
cgitsourcejessie0.10.2.git2.0.1-3+deb8u1

Notes

https://git.zx2c4.com/cgit/commit/filters/html-converters/txt2html?id=13c2d3df0440ce04273de3149631a9bd97490c6e
CVE Request: http://www.openwall.com/lists/oss-security/2016/03/05/8

Search for package or bug name: Reporting problems