View | Details | Raw Unified | Return to bug 243437 | Differences between
and this patch

Collapse All | Expand All

(-)vuln.xml (+31 lines)
Lines 58-63 Link Here
58
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
58
  * Do not forget port variants (linux-f10-libxml2, libxml2, etc.)
59
-->
59
-->
60
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
60
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
61
  <vuln vid="a512a412-3a33-11ea-af63-0800274e5f20">
62
    <topic>gitea -- multiple vulnerabilities</topic>
63
    <affects>
64
      <package>
65
	<name>gitea</name>
66
	<range><lt>1.10.3</lt></range>
67
      </package>
68
    </affects>
69
    <description>
70
      <body xmlns="http://www.w3.org/1999/xhtml">
71
	<p>The Gitea Team reports:</p>
72
	<blockquote cite="https://github.com/go-gitea/gitea/releases/tag/v1.10.3">
73
	  <ul>
74
	    <li>Hide credentials when submitting migration</li>
75
	    <li>Never allow an empty password to validate</li>
76
	    <li>Prevent redirect to Host</li>
77
	    <li>Hide public repos owned by private orgs</li>
78
	  </ul>
79
	</blockquote>
80
      </body>
81
    </description>
82
    <references>
83
      <url>https://github.com/go-gitea/gitea/releases/tag/v1.10.3</url>
84
      <freebsdpr>ports/243437</freebsdpr>
85
    </references>
86
    <dates>
87
      <discovery>2019-11-22</discovery>
88
      <entry>2020-01-18</entry>
89
    </dates>
90
  </vuln>
91
61
  <vuln vid="a6cf65ad-37d2-11ea-a1c7-b499baebfeaf">
92
  <vuln vid="a6cf65ad-37d2-11ea-a1c7-b499baebfeaf">
62
    <topic>MySQL -- Multiple vulerabilities</topic>
93
    <topic>MySQL -- Multiple vulerabilities</topic>
63
    <affects>
94
    <affects>

Return to bug 243437