| Name | TEMP-0000000-1CC548 |
| Description | Cross-site scripting (XSS) vulnerability in cgit's "txt2html" filter |
| Source | Automatically generated temporary name. Not for external reference. |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| cgit (PTS) | jessie, jessie (lts) | 0.10.2.git2.0.1-3+deb8u2 | fixed |
| stretch (security), stretch (lts), stretch | 1.1+git2.10.2-3+deb9u1 | fixed |
| buster | 1.2.1+git2.18.0-1 | fixed |
| bullseye | 1.2.3+git2.25.1-1 | fixed |
| sid, trixie, bookworm | 1.2.3+git20221219.50.91f2590+git2.39.1-1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| cgit | source | jessie | 0.10.2.git2.0.1-3+deb8u1 | | | |
| cgit | source | (unstable) | 0.12.0.git2.7.0-1 | | | |
Notes
https://git.zx2c4.com/cgit/commit/filters/html-converters/txt2html?id=13c2d3df0440ce04273de3149631a9bd97490c6e
CVE Request: https://www.openwall.com/lists/oss-security/2016/03/05/8