View | Details | Raw Unified | Return to bug 251296 | Differences between
and this patch

Collapse All | Expand All

(-)vuln.xml (+29 lines)
Lines 58-63 Link Here
58
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
58
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
59
-->
59
-->
60
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
60
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
61
  <vuln vid="55facdb0-2c24-11eb-9aac-08002734b9ed">
62
    <topic>gitea -- multiple vulnerabilities</topic>
63
    <affects>
64
      <package>
65
	<name>gitea</name>
66
	<range><lt>1.12.6</lt></range>
67
      </package>
68
    </affects>
69
    <description>
70
      <body xmlns="http://www.w3.org/1999/xhtml">
71
	<p>The Gitea Team reports for release 1.12.6:</p>
72
	<blockquote cite="https://blog.gitea.io/2020/11/gitea-1.12.6-is-released/">
73
	  <ul>
74
	    <li>Prevent git operations for inactive users</li>
75
	    <li>Disallow urlencoded new lines in git protocol paths if there is a port</li>
76
	  </ul>
77
	</blockquote>
78
      </body>
79
    </description>
80
    <references>
81
      <url>Disallow urlencoded new lines in git protocol paths if there is a port</url>
82
      <freebsdpr>ports/251296</freebsdpr>
83
    </references>
84
    <dates>
85
      <discovery>2020-11-16</discovery>
86
      <entry>2020-11-21</entry>
87
    </dates>
88
  </vuln>
89
61
  <vuln vid="dc132c91-2b71-11eb-8cfd-4437e6ad11c4">
90
  <vuln vid="dc132c91-2b71-11eb-8cfd-4437e6ad11c4">
62
    <topic>mutt -- authentication credentials being sent over an unencrypted connection</topic>
91
    <topic>mutt -- authentication credentials being sent over an unencrypted connection</topic>
63
    <affects>
92
    <affects>

Return to bug 251296