Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #12355 Remove dead code with security vulnerabilities related to Gerrit communication
    Actions
    Infos
    #12355
    Thomas Gerbet (tgerbet)
    2018-10-04 17:25
    2018-10-04 09:58
    13022
    Details
    Remove dead code with security vulnerabilities related to Gerrit communication
    There is a bunch of code related to communication with Gerrit servers that is unused and crippled by shell injections.

    The code should be removed so that a developer does not start using risky functions.
    SCM/Git
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Closed
    2018-10-04
    Attachments
    Artifact links

    Releases

    Fixed in

    Artifact ID Project Tracker Summary Status Last Update Date Submitted By Assigned to
    rel #12154 Tuleap Releases 10.6 Delivered 2018-10-11 14:36 Manuel Vacelet (vaceletm)
    Empty
    References
    Referencing request #12355

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/76/12776/1' of ssh://gerrit.tuleap.net:29418/tuleap e89ee4c888
    User avatar Manuel Vacelet (vaceletm) , 2018-10-04 17:24
    request #12355: Remove dead code with security vulnerabilities related to Gerrit communication 1d48d09738
    User avatar Thomas Gerbet (tgerbet) , 2018-10-04 10:01
    Referenced by request #12355

    Artifact Tracker v5

    rel #12154 10.6

    Other

    gerrit #12776
    Display settings

    Follow-ups