Gitea version 28.2 fixes multiple vulnerabilities, including an SSH authentication flaw and an OpenID risk.
Learn what's patched and why upgrading matters.
In total, the service's creators disclosed 12 security issues. Of these, nine are fixed with the new update, while the remaining three were already addressed in earlier versions but have now become widely known.
What problems are being fixed?
Among the issues resolved is an issue when connecting with digital keys, which involved checking certificates. At the same time, an issue with connecting through external identification services was fixed, which potentially exposed risks when connecting accounts.
The update also closes an information disclosure vulnerability that could expose file attachments from private code repositories through draft posts. In addition, it fixes an issue that allowed excessively large requests in automated processes, placing a limit on their size.
READ ALSO
Researchers show how two vulnerabilities in OpenBSD 7.9 could grant full administrator privileges
Improvements and next steps
In addition to security issues, the new version brings improvements to the operation of automations, the management of code change suggestions, the compatibility of links for software packages, as well as the connection with some browsers.
Due to the number and nature of the fixes, the Gitea team recommends that everyone immediately upgrade to the latest version.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
Top comments (0)