Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 7 Mar 2016 20:29:37 +0100
From: "Jason A. Donenfeld" <>
To: oss-security <>
Subject: Re: Cgit XSS "vulnerability" has no CVE?

On Mon, Mar 7, 2016 at 7:46 PM, Peter Bex <> wrote:
> Considering that it's been "fixed", I thought a CVE might be useful to
> trigger distros to include the patch.  Without a CVE, distros like
> Debian and RedHat will keep using the unpatched version, which is a
> shame if such an easy fix is available.

Considering so many of the other example filters have the same
problem, I don't think this will buy much. However, after I revamp the
example filters into a nice "one stop" solution for lots of filetypes,
we can start promoting that various places for its security benefits.

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.