FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

gitea -- Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Affected packages
gitea < 1.21.3

Details

VuXML ID b2765c89-a052-11ee-bed2-596753f1a87c
Discovery 2023-12-19
Entry 2023-12-21

The Gitea team reports:

Update golang.org/x/crypto

References

URL https://github.com/go-gitea/gitea/releases/tag/v1.21.3