|
|
2d827eaae1
|
security: fix CVE 2022 23555 (#4274)
* add flow to invitation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* show warning on invitation page
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add security advisory
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-12-23 14:16:30 +01:00 |
|
|
|
47d79ac28c
|
security: fix CVE 2022 46172 (#4275)
* fallback to current user in user_write, add flag to disable user creation
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* update api and web ui
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* update default flows
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add cve post to website
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
* add tests
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-12-23 14:16:26 +01:00 |
|
|
|
e1a6dede54
|
*: backport CVE-2022-46145 fix
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-12-01 10:41:26 +02:00 |
|
|
|
4d12a98c5d
|
root: rework and expand security policy
Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
|
2022-11-30 13:05:35 +02:00 |
|
