Attachment 198876 Details for Bug 232897 – Patch to vuxml describing the vulnerability

[patch] Patch to vuxml describing the vulnerability

vuxml-gitea-1.5.3.patch (text/plain), 1.38 KB, created by Stefan Bethke on 2018-11-01 21:46:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Stefan Bethke

Created: 2018-11-01 21:46:51 UTC

Size: 1.38 KB

patch

obsolete

>Index: vuln.xml
>===================================================================
>--- vuln.xml	(revision 483743)
>+++ vuln.xml	(working copy)
>@@ -58,6 +58,35 @@
>   * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
> -->
> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
>+  <vuln vid="deb4f633-de1d-11e8-a9fb-080027f43a02">
>+    <topic>gitea -- remote code exeution</topic>
>+    <affects>
>+      <package>
>+	<name>gitea</name>
>+	<range><lt>1.5.3</lt></range>
>+      </package>
>+    </affects>
>+    <description>
>+      <body xmlns="http://www.w3.org/1999/xhtml">
>+	<p>The Gitea project reports:</p>
>+	<blockquote cite="https://blog.gitea.io/2018/10/gitea-1.5.3-is-released/">
>+	  <p>[This release] contains crit[i]cal security fix for vulnerability
>+	  that could potentially allow for authorized users to do remote code
>+	  ex[e]cution.</p>
>+	</blockquote>
>+      </body>
>+    </description>
>+    <references>
>+      <url>https://github.com/go-gitea/gitea/pull/5177</url>
>+      <url>https://github.com/go-gitea/gitea/pull/5196</url>
>+      <url>https://github.com/go-macaron/session/commit/084f1e5c1071f585902a7552b483cee04bc00a14</url>
>+    </references>
>+    <dates>
>+      <discovery>2018-10-25</discovery>
>+      <entry>2018-11-01</entry>
>+    </dates>
>+  </vuln>
>+
>   <vuln vid="e0ab1773-07c1-46c6-9170-4c5e81c00927">
>     <topic>curl -- multiple vulnerabilities</topic>
>     <affects>

Actions: View | Diff

Attachments on bug 232897: 198875 | 198876