ALT-PU-2023-8972

Низкий

ALT-PU-2023-8972: package gitea update to version 1.21.2-alt1

Источник

errata.altlinux.org

Дата публикации

15.12.2023

Дата обновления

15.12.2023

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades gitea to version 1.21.2-alt1.

Устраненные уязвимости1

CVE-2025-68945

Средний 5.3

Дата публикации: 26.12.2025

CWE-359

In Gitea before 1.21.2, an anonymous user can visit a private user's project. * GHSA-7xq4-mwcp-q8fx: Gitea: anonymous user can visit private user's project

CVSS 3.1

Средний 5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: Low
Integrity: None
Availability: None

Ссылки

CVE-2025-68945 https://nvd.nist.gov/vuln/detail/CVE-2025-68945

Ссылки2

ALT-PU-2023-8972 https://errata.altlinux.org/ALT-PU-2023-8972

GHSA-7xq4-mwcp-q8fx

https://github.com/advisories/GHSA-7xq4-mwcp-q8fx

Связанные уязвимости

CVE-2025-68945

CVSS3: 5.3

ubuntu

11 месяцев назад

In Gitea before 1.21.2, an anonymous user can visit a private user's project.

CVE-2025-68945

CVSS3: 5.3

redhat

11 месяцев назад

In Gitea before 1.21.2, an anonymous user can visit a private user's project.

CVE-2025-68945

CVSS3: 5.3

nvd

11 месяцев назад

In Gitea before 1.21.2, an anonymous user can visit a private user's project.

CVE-2025-68945

CVSS3: 5.3

debian

11 месяцев назад

In Gitea before 1.21.2, an anonymous user can visit a private user's p ...

GHSA-7xq4-mwcp-q8fx

CVSS3: 5.8

github

11 месяцев назад

Gitea: anonymous user can visit private user's project