Date: Fri, 20 Aug 2021 18:37:26 GMT From: Adam Weinberger <adamw@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: e8c208189148 - main - vuxml: Add entry for gitea < 1.14.6 Message-ID: <202108201837.17KIbQfi040880@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by adamw: URL: https://cgit.FreeBSD.org/ports/commit/?id=e8c2081891484d2cca601ae5b6643f4911ffd2ae commit e8c2081891484d2cca601ae5b6643f4911ffd2ae Author: Stefan Bethke <stb@lassitu.de> AuthorDate: 2021-08-20 18:35:07 +0000 Commit: Adam Weinberger <adamw@FreeBSD.org> CommitDate: 2021-08-20 18:37:03 +0000 vuxml: Add entry for gitea < 1.14.6 --- security/vuxml/vuln-2021.xml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml index dd87d2873b95..e4f4a9568585 100644 --- a/security/vuxml/vuln-2021.xml +++ b/security/vuxml/vuln-2021.xml @@ -1,3 +1,33 @@ + <vuln vid="733afd81-01cf-11ec-aec9-0800273f11ea"> + <topic>gitea -- multiple vulnerabilities</topic> + <affects> + <package> + <name>gitea</name> + <range><lt>1.14.6</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The Gitea Team reports for release 1.14.6:</p> + <blockquote cite="https://blog.gitea.io/2021/08/gitea-1.14.6-is-released/">; + <ul> + <li>Bump github.com/markbates/goth from v1.67.1 to v1.68.0 (#16538) (#16540)</li> + <li>Switch to maintained JWT lib (#16532) (#16535)</li> + <li>Upgrade to latest version of golang-jwt (as forked for 1.14) (#16590) (#16607)</li> + </ul> + </blockquote> + </body> + </description> + <references> + <url>https://github.com/go-gitea/gitea/releases/tag/v1.14.6</url>; + <freebsdpr>ports/257973</freebsdpr> + </references> + <dates> + <discovery>2021-07-24</discovery> + <entry>2021-08-20</entry> + </dates> + </vuln> + <vuln vid="70e71a24-0151-11ec-bf0c-080027eedc6a"> <topic>bouncycastle15 -- bcrypt password checking vulnerability</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202108201837.17KIbQfi040880>