Security update for cgit
This update for cgit fixes the following issues:
The following security vulnerability was addressed:
- CVE-2018-14912: Fixed a directory traversal vulnerability, when
enable-http-clone=1 is not turned off (boo#1103799)
The following other changes were made:
- Update to upstream release 1.2.1
* syntax-highlighting: replace invalid unicode with '?'
* ui-repolist: properly sort by age
* ui-patch: fix crash when using path limit
-
Submitted by
Jan Engelhardt (jengelh)
Fixed bugs
bnc#1103799
VUL-1: CVE-2018-14912 cgit: directory traversal vulnerability in cgit < 1.2.1
