Debian Security Advisory DSA-3545-1 [email protected]
https://www.debian.org/security/ Salvatore Bonaccorso
April 07, 2016 https://www.debian.org/security/faq
Package : cgit
CVE ID : CVE-2016-1899 CVE-2016-1900 CVE-2016-1901
Debian Bug : 812411
Several vulnerabilities were discovered in cgit, a fast web frontend for
git repositories written in C. A remote attacker can take advantage of
these flaws to perform cross-site scripting, header injection or denial
of service attacks.
For the stable distribution (jessie), these problems have been fixed in
version 0.10.2.git2.0.1-3+deb8u1.
For the testing distribution (stretch), these problems have been fixed
in version 0.12.0.git2.7.0-1 or earlier.
For the unstable distribution (sid), these problems have been fixed in
version 0.12.0.git2.7.0-1 or earlier.
We recommend that you upgrade your cgit packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 8 | mips | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_mips.deb |
Debian | 8 | armel | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_armel.deb |
Debian | 8 | all | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_all.deb |
Debian | 8 | powerpc | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_powerpc.deb |
Debian | 8 | i386 | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_i386.deb |
Debian | 8 | mipsel | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_mipsel.deb |
Debian | 8 | s390x | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_s390x.deb |
Debian | 8 | armhf | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_armhf.deb |
Debian | 8 | amd64 | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_amd64.deb |
Debian | 8 | ppc64el | cgit | < 0.10.2.git2.0.1-3+deb8u1 | cgit_0.10.2.git2.0.1-3+deb8u1_ppc64el.deb |