openSUSE-SU-2018:2313-1

Описание

This update for cgit to version 1.2.1 fixes the following issues:

The following security vulnerability was addressed:

• CVE-2018-14912: Fixed a directory traversal vulnerability, when enable-http-clone=1 is not turned off (boo#1103799)

The following other changes were made:

• Update to upstream release 1.2.1:

  • syntax-highlighting: replace invalid unicode with '?'
  • ui-repolist: properly sort by age
  • ui-patch: fix crash when using path limit

• Update bundled git to 2.11.1

• Update to upstream release 1.0:

  • Add repo.homepage/gitweb.homepage setting and homepage tab.
  • Show reverse paths in title bar so that browser tab shows filename.
  • Allow redirects even when caching is turned on.
  • More gracefully deal with unparsable commits.