Detections
Analytics

FreeBSD : gitea -- multiple vulnerabilities (d3180f02-031e-11ec-875f-0800273f11ea)

high Nessus Plugin ID 152748

Language:

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

The Gitea Team reports for release 1.15.0 :

- Encrypt LDAP bind password in db with SECRET_KEY (#15547)

- Remove random password in Dockerfiles (#15362)

- Upgrade to the latest version of golang-jwt and increase minimum go to 1.15 (#16590) (#16606)

- Correctly create of git-daemon-export-ok files (#16508) (#16514)

- Don't show private user's repo in explore view (#16550) (#16554)

- Update node tar dependency to 6.1.6 (#16622) (#16623)

Solution

Update the affected package.

See Also

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=257994

https://github.com/go-gitea/gitea/releases/tag/v1.15.0

http://www.nessus.org/u?bfc31427

Plugin Details

Severity: High

ID: 152748

File Name: freebsd_pkg_d3180f02031e11ec875f0800273f11ea.nasl

Version: 1.1

Type: Local

Published: 8/23/2021

Updated: 8/23/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:gitea

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 8/22/2021

Vulnerability Publication Date: 4/29/2021