Detections
Analytics

FreeBSD : gitea -- multiple vulnerabilities (0e561c06-d13a-11eb-92be-0800273f11ea)

high Nessus Plugin ID 151004

Language:

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

The Gitea Team reports for release 1.14.3 :

- Encrypt migration credentials at rest (#15895) (#16187)

- Only check access tokens if they are likely to be tokens (#16164) (#16171)

- Add missing SameSite settings for the i_like_gitea cookie (#16037) (#16039)

- Fix setting of SameSite on cookies (#15989) (#15991)

Solution

Update the affected package.

See Also

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256720

https://github.com/go-gitea/gitea/releases/tag/v1.14.3

http://www.nessus.org/u?d6ddf137

Plugin Details

Severity: High

ID: 151004

File Name: freebsd_pkg_0e561c06d13a11eb92be0800273f11ea.nasl

Version: 1.1

Type: Local

Published: 6/25/2021

Updated: 6/25/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:gitea

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 6/19/2021

Vulnerability Publication Date: 5/16/2021