svn commit: r483744 - head/security/vuxml
Florian Smeets
flo at FreeBSD.org
Thu Nov 1 22:00:17 UTC 2018
Author: flo
Date: Thu Nov 1 22:00:16 2018
New Revision: 483744
URL: https://svnweb.freebsd.org/changeset/ports/483744
Log:
Document gitea vulnerability
PR: 232897
Submitted by: stb at lassitu.de (maintainer)
Modified:
head/security/vuxml/vuln.xml
Modified: head/security/vuxml/vuln.xml
==============================================================================
--- head/security/vuxml/vuln.xml Thu Nov 1 21:21:08 2018 (r483743)
+++ head/security/vuxml/vuln.xml Thu Nov 1 22:00:16 2018 (r483744)
@@ -58,6 +58,35 @@ Notes:
* Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="deb4f633-de1d-11e8-a9fb-080027f43a02">
+ <topic>gitea -- remote code exeution</topic>
+ <affects>
+ <package>
+ <name>gitea</name>
+ <range><lt>1.5.3</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The Gitea project reports:</p>
+ <blockquote cite="https://blog.gitea.io/2018/10/gitea-1.5.3-is-released/">
+ <p>[This release] contains crit[i]cal security fix for vulnerability
+ that could potentially allow for authorized users to do remote code
+ ex[e]cution.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <url>https://github.com/go-gitea/gitea/pull/5177</url>
+ <url>https://github.com/go-gitea/gitea/pull/5196</url>
+ <url>https://github.com/go-macaron/session/commit/084f1e5c1071f585902a7552b483cee04bc00a14</url>
+ </references>
+ <dates>
+ <discovery>2018-10-25</discovery>
+ <entry>2018-11-01</entry>
+ </dates>
+ </vuln>
+
<vuln vid="e0ab1773-07c1-46c6-9170-4c5e81c00927">
<topic>curl -- multiple vulnerabilities</topic>
<affects>
More information about the svn-ports-all
mailing list