Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 918603 - <www-apps/gitea-1.20.5, <www-apps/gitea-1.21.0 multiple vulnerabilities
Summary: <www-apps/gitea-1.20.5, <www-apps/gitea-1.21.0 multiple vulnerabilities
Status: RESOLVED DUPLICATE of bug 918674
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Linux bug wranglers
URL: https://about.gitea.com/
Whiteboard:
Keywords: PullRequest
Depends on:
Blocks:
 
Reported: 2023-11-26 11:59 UTC by jon R-B
Modified: 2023-11-29 12:53 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description jon R-B 2023-11-26 11:59:16 UTC
* SECURITY
Leaking private data 
  * Unify two factor check #27915
  * Dont leak private users via extensions #28023
  * Fix comment permissions #28213

Reproducible: Always
Comment 1 Ryan Tsien 2023-11-26 12:30:25 UTC
These issues will be solved in 1.20.6 and 1.21.1 (not yet released), only #27915 has been merged into 1.21.0, so I will bump the version to 1.20.6 and 1.21.1 as soon as possible when the upstream releases them.
Comment 2 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-11-28 16:01:26 UTC
Please remember to file security bugs under the "Gentoo Security" component.

*** This bug has been marked as a duplicate of bug 918674 ***
Comment 3 Larry the Git Cow gentoo-dev 2023-11-29 12:53:58 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f6e4074bf9ae429394f3dd16290ed70ec582ac16

commit f6e4074bf9ae429394f3dd16290ed70ec582ac16
Author:     Ryan Qian <i@bitbili.net>
AuthorDate: 2023-11-28 09:12:28 +0000
Commit:     Yixun Lan <dlan@gentoo.org>
CommitDate: 2023-11-29 12:52:17 +0000

    www-apps/gitea: add 1.20.6, drop 1.20.5
    
    Bug: https://bugs.gentoo.org/918603
    
    Closes: https://github.com/gentoo/gentoo/pull/34015
    Signed-off-by: Ryan Qian <i@bitbili.net>
    Signed-off-by: Yixun Lan <dlan@gentoo.org>

 www-apps/gitea/Manifest                                     | 2 +-
 www-apps/gitea/{gitea-1.20.5.ebuild => gitea-1.20.6.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a91336ed740f309ccabd88fa86b3fb1f2f157150

commit a91336ed740f309ccabd88fa86b3fb1f2f157150
Author:     Ryan Qian <i@bitbili.net>
AuthorDate: 2023-11-27 03:55:50 +0000
Commit:     Yixun Lan <dlan@gentoo.org>
CommitDate: 2023-11-29 12:51:30 +0000

    www-apps/gitea: add 1.21.1, drop 1.21.0
    
    Bug: https://bugs.gentoo.org/918603
    
    Signed-off-by: Ryan Qian <i@bitbili.net>
    Signed-off-by: Yixun Lan <dlan@gentoo.org>

 www-apps/gitea/Manifest                                     | 2 +-
 www-apps/gitea/{gitea-1.21.0.ebuild => gitea-1.21.1.ebuild} | 0
 2 files changed, 1 insertion(+), 1 deletion(-)