Gusted f7cb37ca5a fix: ensure correct ssh public key is used for authentication ... - The root cause is described in b4f1988a35 - Move to a fork of `github.com/gliderlabs/ssh` that exposes the permissions that was chosen by `x/crypto/ssh` after succesfully authenticating, this is the recommended mitigation by the Golang security team. The fork exposes this, since `gliderlabs/ssh` instead relies on context values to do so, which is vulnerable to the same attack, although partially mitigated by the fix in `x/crypto/ssh` it would not be good practice and defense deep to rely on it. - Existing tests covers that the functionality is preserved. - No tests are added to ensure it fixes the described security, the exploit relies on non-standard SSH behavior it would be too hard to craft SSH packets to exploit this. (cherry picked from commit 3e1b03838e) Conflicts: go.mod go.sum trivial context conflict		2024-12-12 07:02:14 +01:00
..
actions	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
activitypub	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
analyze
assetfs	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
auth	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
avatar	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
base	fix: extend forgejo_auth_token table	2024-11-15 12:02:14 +01:00
cache	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
charset	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
container	Add container.FilterSlice function (gitea#30339) (skip using it)	2024-08-18 06:55:15 +02:00
csv	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
emoji
eventsource
generate	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
git	Fix IsObjectExist with gogit (#31790) (#31806)	2024-08-11 09:41:23 +02:00
gitgraph	models/asymkey: Implement Tag verification	2024-04-01 13:42:11 +00:00
gitrepo	Move get/set default branch from git package to gitrepo package to hide repopath (#29126)	2024-03-11 23:36:59 +07:00
graceful	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
hcaptcha
highlight	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
hostmatcher
html
httpcache
httplib	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
indexer	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
issue/template
json
label
lfs	Fix #31185 try fix lfs download from bitbucket failed (#31201)	2024-08-18 07:01:03 +02:00
log	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
markup	fix: strict matching of allowed content for sanitizer	2024-11-15 11:59:35 +01:00
mcaptcha
metrics
migration	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
nosql	s/Gitea/Forgejo in various log messages and comments	2024-04-22 14:41:17 +00:00
optional	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
options
packages	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
paginator
pprof
private	Move database operations of merging a pull request to post receive hook and add a transaction (#30805)	2024-05-14 15:37:32 +02:00
process	[FIX] make pprof labels conformant with prometheus spec	2024-04-01 18:22:11 +00:00
proxy
proxyprotocol
public	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
queue	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
recaptcha
references	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
regexplru	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
repository	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
secret	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
session	Avoid importing modules/web/middleware in modules/session (#30584) (#30589)	2024-04-21 18:16:09 +02:00
setting	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
sitemap	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
ssh	fix: ensure correct ssh public key is used for authentication	2024-12-12 07:02:14 +01:00
storage	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
structs	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
svg
sync
system	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
templates	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
test	test(util): MockProtect when mocking multiple times	2024-06-02 14:32:00 +00:00
testlogger	Merge pull request '[v7.0/forgejo] [FEAT] Mark database errors in tests as failure' (#2978) from bp-v7.0/forgejo-2dabd20 into v7.0/forgejo	2024-04-02 15:53:23 +00:00
timeutil	Remove the time-since class (#29826)	2024-03-20 08:46:30 +01:00
translation	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
turnstile
typesniffer	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
updatechecker	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
uri	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
user	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
util	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
validation
web	enable linter testifylint on v7 (#4572)	2024-07-30 19:42:06 +00:00
webhook	[FEAT] sourcehut webhooks	2024-04-05 19:36:04 +00:00