Forgejo v16.0.2 released
Beyond coding. We Forge. Ein einfacher, selbst gehosteter Git-Service
Forgejo hat v16.0.2 released. Dieser Release ist ein Security Release. Also, schnell mal aktualisieren.
Release notes
Security bug fixes
PR (backported): fix: add CGNAT (100.64.0.0/10) to 'private' hostmatcher rule
PR: - fix: prevent arbitrary file reads from org-mode rendering
PR: - fix: prevent stored XSS in Actions pre-execution warnings and errors
Bug fixes
PR (backported): fix: only look for jobs in repositories where Actions are enabled
PR (backported): fix: prevent stuck runner jobs when FetchTask performance is slower than client-side timeout
PR (backported): fix: enable reverse-proxy authentication on git routes
PR (backported): fix oauth2: Initialize gothic even if oauth2 is disabled
PR (backported): fix: suppress git subcommand errors caused by context cancellation involving SIGTERM
PR (backported): fix: multiple session middlewares have independent in-memory state
Quelle: https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/16.0.2.md