ALT-PU-2022-1210

Критический

ALT-PU-2022-1210: package gitea update to version 1.15.10-alt1

Источник

errata.altlinux.org

Дата публикации

04.02.2022

Дата обновления

04.02.2026

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades gitea to version 1.15.10-alt1.

Устраненные уязвимости1

CVE-2021-45330

Критический 9.8

Дата публикации: 09.02.2022

CWE-459

An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse. * GHSA-pg38-r834-g45j: Improper Privilege Management in Gitea

CVSS 3.1

Критический 9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS 2.0

Высокий 7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Ссылки

CVE-2021-45330 https://nvd.nist.gov/vuln/detail/CVE-2021-45330

Ссылки2

ALT-PU-2022-1210 https://errata.altlinux.org/ALT-PU-2022-1210

GHSA-pg38-r834-g45j

https://github.com/advisories/GHSA-pg38-r834-g45j

Связанные уязвимости

CVE-2021-45330

CVSS3: 9.8

nvd

почти 5 лет назад

An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and the session remains valid on the server side for reuse.

CVE-2021-45330

CVSS3: 9.8

debian

почти 5 лет назад

An issue exsits in Gitea through 1.15.7, which could let a malicious u ...

GHSA-pg38-r834-g45j

CVSS3: 9.8

github

почти 5 лет назад

Improper Privilege Management in Gitea

ALT-PU-2022-1116

CVSS3: 9.8

altlinux

почти 5 лет назад

ALT-PU-2022-1116: package `gitea` update to version 1.15.10-alt1