Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e135b24d by Salvatore Bonaccorso at 2023-08-07T22:51:07+02:00
Add CVE-2022-38795/gitea
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -69130,7 +69130,7 @@ CVE-2022-39028 (telnetd in GNU Inetutils through 2.3,
MIT krb5-appl through 1.0.
NOTE:
https://lists.gnu.org/archive/html/bug-inetutils/2022-08/msg00002.html
NOTE:
https://pierrekim.github.io/blog/2022-08-24-2-byte-dos-freebsd-netbsd-telnetd-netkit-telnetd-inetutils-telnetd-kerberos-telnetd.html
CVE-2022-38795 (In Gitea through 1.17.1, repo cloning can occur in the
migration funct ...)
- TODO: check
+ - gitea <removed>
CVE-2022-38794 (Zaver through 2020-12-15 allows directory traversal via the
GET /.. su ...)
NOT-FOR-US: Zaver
CVE-2022-38793
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e135b24dc9b8ccb3de17e5348b395233cf5c0819
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e135b24dc9b8ccb3de17e5348b395233cf5c0819
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits