ALT-PU-2025-17085

Высокий

ALT-PU-2025-17085: package gitea update to version 1.23.3-alt1

Источник

errata.altlinux.org

Дата публикации

14.02.2025

Дата обновления

14.02.2025

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades gitea to version 1.23.3-alt1.

Устраненные уязвимости2

CVE-2025-68939

Средний 5.3

Дата публикации: 26.12.2025

CWE-424

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.

CVSS 3.1

Средний 5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: None

Ссылки

CVE-2025-68939 https://nvd.nist.gov/vuln/detail/CVE-2025-68939

Ссылки3

ALT-PU-2025-17085 https://errata.altlinux.org/ALT-PU-2025-17085

GHSA-263q-5cv3-xq9g

https://github.com/advisories/GHSA-263q-5cv3-xq9g

GHSA-rrcw-5rjv-vj26

https://github.com/advisories/GHSA-rrcw-5rjv-vj26

Связанные уязвимости

CVE-2025-68940

CVSS3: 5.3

ubuntu

11 месяцев назад

In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.

CVE-2025-68940

CVSS3: 3.1

redhat

11 месяцев назад

In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.

CVE-2025-68940

CVSS3: 5.3

nvd

11 месяцев назад

In Gitea before 1.22.5, branch deletion permissions are not adequately enforced after merging a pull request.

CVE-2025-68940

CVSS3: 5.3

debian

11 месяцев назад

In Gitea before 1.22.5, branch deletion permissions are not adequately ...

CVE-2025-68939

CVSS3: 5.3

ubuntu

11 месяцев назад

Gitea before 1.23.0 allows attackers to add attachments with forbidden file extensions by editing an attachment name via an attachment API.