Accepted cgit 1.1+git2.10.2-3+deb9u1 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 04 Aug 2018 12:27:48 +0200
Source: cgit
Binary: cgit
Architecture: source
Version: 1.1+git2.10.2-3+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Debian Cgit Packaging Team <pkg-cgit-devel@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
cgit - hyperfast web frontend for git repositories written in C
Closes: 905382
Changes:
cgit (1.1+git2.10.2-3+deb9u1) stretch-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* clone: fix directory traversal (CVE-2018-14912) (Closes: #905382)
Checksums-Sha1:
4203d69518c3134d9ec001c04d894a8fad3a190f 2309 cgit_1.1+git2.10.2-3+deb9u1.dsc
37d74a9266a995c4fc53bd78a5affdf8d214e174 6118627 cgit_1.1+git2.10.2.orig.tar.gz
2c5292295fcc0f1e081e7812d569fa271e1bc8d2 11508 cgit_1.1+git2.10.2-3+deb9u1.debian.tar.xz
abfe9a68f32f856ef369c5cb0d684fc57a471e1f 6336 cgit_1.1+git2.10.2-3+deb9u1_source.buildinfo
Checksums-Sha256:
12b6b10a306ba9e624187527d58ec89ea4e05f890f6baa5dde76facd7a617686 2309 cgit_1.1+git2.10.2-3+deb9u1.dsc
ca271d2cd188bd8a1d9a103c3d5e889ac67169bd2b9b554fbdaa98cf76e8a2bb 6118627 cgit_1.1+git2.10.2.orig.tar.gz
2768eec1f9bc23d762276ce45732bd844ee7835893d898be06094606506cd8c0 11508 cgit_1.1+git2.10.2-3+deb9u1.debian.tar.xz
d8ae5a5a7f8a5906e6c0c284746c38cde48bd192a5fa03db165c99b98dd085b9 6336 cgit_1.1+git2.10.2-3+deb9u1_source.buildinfo
Files:
6f4fff92c5c61c461e0517fcf970c174 2309 net extra cgit_1.1+git2.10.2-3+deb9u1.dsc
ed3b45ecf5b8bc4afe92ace523548b26 6118627 net extra cgit_1.1+git2.10.2.orig.tar.gz
a422ce22211961179d0efabafad6d3d4 11508 net extra cgit_1.1+git2.10.2-3+deb9u1.debian.tar.xz
33bee95b83bdef0fd324458ed715b09b 6336 net extra cgit_1.1+git2.10.2-3+deb9u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=05E0
-----END PGP SIGNATURE-----