import debian sources 1.4.4.4-4+etch1debian-1.4.4.4-4+etch1
commit2eab3bc742def57cebeb94b7ab3f9f7f49e5cd7c
authorGerrit Pape <pape@smarden.org>
Tue, 24 Feb 2009 23:36:05 +0000 (24 23:36 +0000)
committerGerrit Pape <pape@smarden.org>
Wed, 25 Feb 2009 00:02:26 +0000 (25 00:02 +0000)
treeb91bd9d7a29d83ca85526fa32d68c539dccb4863
parent3446491cb3b5c71fcddb213ba481ce2890c12481
import debian sources 1.4.4.4-4+etch1

git-core (1:1.4.4.4-4+etch1) stable-security; urgency=high

  * Fix gitweb command injection issues involving diffs, snapshots
    (CVE-2008-5517) and searches (CVE-2008-5516).

 -- Florian Weimer <fw@deneb.enyo.de>  Sun, 11 Jan 2009 19:35:31 +0100
debian/changelog
debian/diff/gitweb-do-not-run-git-diff-that-is-Porcelain.diff [moved from debian/diff/0003-gitweb-do-not-run-git-diff-that-is-Porcelain.diff with 76% similarity]
debian/diff/gitweb-fix-pickaxe.diff [new file with mode: 0644]
debian/diff/gitweb-fix-snapshot.diff [new file with mode: 0644]
debian/git-daemon/log/run [new file with mode: 0644]
debian/git-daemon/run [new file with mode: 0644]