Branch sisyphus update bulletin.

Package gitea updated to version 1.16.6-alt1 for branch sisyphus in task 298963.

Published: 2022-03-10
Modified: 2024-11-21

CVE-2022-0905

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.

Severity: MEDIUM (5.5) Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N

Severity: HIGH (7.1) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

References:

Published: 2022-03-24
Modified: 2024-11-21

CVE-2022-1058

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.

Severity: MEDIUM (5.8) Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Severity: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References:

VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla

Version: 2.1.2