Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2016:0196-1

Опубликовано: 22 янв. 2016
Источник: suse-cvrf

Описание

Security update for cgit

This update to cgit 0.12 fixes the following issues:

  • CVE-2016-1899: Reflected Cross Site Scripting and Header Injection in Mimetype Query String
  • CVE-2016-1900: Stored Cross Site Scripting and Header Injection in Filename Parameter
  • CVE-2016-1901: Integer Overflow resulting in Buffer Overflow

The bundled git version was updated to 2.7.0.

Список пакетов

openSUSE Leap 42.1
cgit-0.12-6.1

Ссылки

Описание

CRLF injection vulnerability in the ui-blob handler in CGit before 0.12 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via CRLF sequences in the mimetype parameter, as demonstrated by a request to blob/cgit.c.

Затронутые продукты
openSUSE Leap 42.1:cgit-0.12-6.1
Ссылки

Описание

CRLF injection vulnerability in the cgit_print_http_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a repository to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via newline characters in a filename.

Затронутые продукты
openSUSE Leap 42.1:cgit-0.12-6.1
Ссылки

Описание

Integer overflow in the authenticate_post function in CGit before 0.12 allows remote attackers to have unspecified impact via a large value in the Content-Length HTTP header, which triggers a buffer overflow.

Затронутые продукты
openSUSE Leap 42.1:cgit-0.12-6.1
Ссылки