(Aug 4) Jann Horn discovered a directory traversal vulnerability in cgit, a fast web frontend for git repositories written in C. A remote attacker can take advantage of this flaw to retrieve arbitrary files via a specially crafted request, when ‘enable-http-clone=1’ (default) is not turned off.
(Aug 3) Sync with git (CVE-2017-14160, CVE-2018-10392, CVE-2018-10393, bz#1516379)
(Aug 3) Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to open redirects, cross-site request forgery, information disclosure, session fixation or denial of service.
(Aug 2) Update to 2.26, fixes CVE-2018-9275
(Aug 2) Update to 2.26, fixes CVE-2018-9275
50 queries. 8.5 mb Memory usage. 0.272 seconds.