From mboxrd@z Thu Jan  1 00:00:00 1970
From: Jason at zx2c4.com (Jason A. Donenfeld)
Date: Mon, 27 May 2013 22:36:41 +0200
Subject: [oss-security] CVE Request: cgit directory traversal
In-Reply-To: <51A39F77.7020907@redhat.com>
References: <CAHmME9o-34DVwr9XJ3kqv_nt6tWs0GLkStbCE1VjSQF8tq33Wg@mail.gmail.com>
 <2064382145.8213708.1369657855832.JavaMail.root@redhat.com>
 <51A39F77.7020907@redhat.com>
Message-ID: <CAHmME9ridgN-CtCUKMP_j8n8ZrKb_9RhdcHJpy39XZMxGHZcRQ@mail.gmail.com>

Hi Kurt,

This issue has now been fixed with CGit v0.9.2:

The announcement may be read here:
http://lists.zx2c4.com/pipermail/cgit/2013-May/001394.html

Jason