ALT-PU-2026-16069

Критический

ALT-PU-2026-16069: package gitea update to version 1.27.3-alt1

Источник

errata.altlinux.org

Дата публикации

23.09.2026

Дата обновления

29.10.2026

Устраненные уязвимости

172

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades gitea to version 1.27.3-alt1.

Устраненные уязвимости172

BDU:2026-01994

Критический 9.1

Дата публикации: 20.02.2026

Уязвимость системы управления Git-репозиториями Gitea, связанная с ошибками разграничения доступа, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS 3.1

Критический 9.1

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: None

CVSS 2.0

Критический 9.4

AV:N/AC:L/Au:N/C:C/I:C/A:N

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: None

Ссылки

BDU:2026-01994 https://bdu.fstec.ru/vul/2026-01994

Ссылки84

ALT-PU-2026-16069 https://errata.altlinux.org/ALT-PU-2026-16069

GHSA-25gq-j9jx-43pg

https://github.com/advisories/GHSA-25gq-j9jx-43pg

GHSA-263q-5cv3-xq9g

https://github.com/advisories/GHSA-263q-5cv3-xq9g

GHSA-2fcr-jfvc-vgg2

https://github.com/advisories/GHSA-2fcr-jfvc-vgg2

GHSA-2m9v-5q2g-58vq

https://github.com/advisories/GHSA-2m9v-5q2g-58vq

GHSA-2r5c-gw76-rh3w

https://github.com/advisories/GHSA-2r5c-gw76-rh3w

GHSA-2vgv-hgv4-22mh

https://github.com/advisories/GHSA-2vgv-hgv4-22mh

GHSA-2wm4-vwp6-v7xc

https://github.com/advisories/GHSA-2wm4-vwp6-v7xc

GHSA-393c-qgvj-3xph

https://github.com/advisories/GHSA-393c-qgvj-3xph

GHSA-3fwp-p5rj-2pxf

https://github.com/advisories/GHSA-3fwp-p5rj-2pxf

GHSA-3pww-vcvm-3gmj

https://github.com/advisories/GHSA-3pww-vcvm-3gmj

GHSA-3r5c-2xxx-h872

https://github.com/advisories/GHSA-3r5c-2xxx-h872

GHSA-44qc-pgvp-wx7v

https://github.com/advisories/GHSA-44qc-pgvp-wx7v

GHSA-4xjf-493q-98p3

https://github.com/advisories/GHSA-4xjf-493q-98p3

GHSA-4xx9-vc8v-87hv

https://github.com/advisories/GHSA-4xx9-vc8v-87hv

GHSA-5ggr-2f2h-jmvm

https://github.com/advisories/GHSA-5ggr-2f2h-jmvm

GHSA-649p-mmhf-85c7

https://github.com/advisories/GHSA-649p-mmhf-85c7

GHSA-66m4-5jjr-2rg5

https://github.com/advisories/GHSA-66m4-5jjr-2rg5

GHSA-683j-3ff6-hh2x

https://github.com/advisories/GHSA-683j-3ff6-hh2x

GHSA-6c6r-5xr4-cr5m

https://github.com/advisories/GHSA-6c6r-5xr4-cr5m

GHSA-6cqf-375w-639g

https://github.com/advisories/GHSA-6cqf-375w-639g

GHSA-6hm7-3pwj-22rm

https://github.com/advisories/GHSA-6hm7-3pwj-22rm

GHSA-777r-4v59-6486

https://github.com/advisories/GHSA-777r-4v59-6486

GHSA-7p4h-3gxq-x3h3

https://github.com/advisories/GHSA-7p4h-3gxq-x3h3

GHSA-7wvc-rvp7-w99x

https://github.com/advisories/GHSA-7wvc-rvp7-w99x

GHSA-82f7-87hm-852x

https://github.com/advisories/GHSA-82f7-87hm-852x

GHSA-8629-vc8r-5p58

https://github.com/advisories/GHSA-8629-vc8r-5p58

GHSA-898p-hh3p-hf9r

https://github.com/advisories/GHSA-898p-hh3p-hf9r

GHSA-8fwc-qjw5-rvgp

https://github.com/advisories/GHSA-8fwc-qjw5-rvgp

GHSA-8p9h-49rc-qgxj

https://github.com/advisories/GHSA-8p9h-49rc-qgxj

GHSA-8qw8-rq86-9pc2

https://github.com/advisories/GHSA-8qw8-rq86-9pc2

GHSA-94v3-77j7-vm48

https://github.com/advisories/GHSA-94v3-77j7-vm48

GHSA-9cgq-wp42-4rpq

https://github.com/advisories/GHSA-9cgq-wp42-4rpq

GHSA-9mq6-mqjj-c2c5

https://github.com/advisories/GHSA-9mq6-mqjj-c2c5

GHSA-9r5x-wg6m-x2rc

https://github.com/advisories/GHSA-9r5x-wg6m-x2rc

GHSA-cc8w-r4qh-3v65

https://github.com/advisories/GHSA-cc8w-r4qh-3v65

GHSA-cm54-pfmc-xrwx

https://github.com/advisories/GHSA-cm54-pfmc-xrwx

GHSA-cp3q-vrj2-ghhh

https://github.com/advisories/GHSA-cp3q-vrj2-ghhh

GHSA-cr4g-f395-h25h

https://github.com/advisories/GHSA-cr4g-f395-h25h

GHSA-f75j-4cw6-rmx4

https://github.com/advisories/GHSA-f75j-4cw6-rmx4

GHSA-f85h-c7m6-cfpm

https://github.com/advisories/GHSA-f85h-c7m6-cfpm

GHSA-fj8v-hjwv-qm88

https://github.com/advisories/GHSA-fj8v-hjwv-qm88

GHSA-fq2p-5p22-8g6j

https://github.com/advisories/GHSA-fq2p-5p22-8g6j

GHSA-frpw-3h2q-4jj6

https://github.com/advisories/GHSA-frpw-3h2q-4jj6

GHSA-fw57-jgch-pgf3

https://github.com/advisories/GHSA-fw57-jgch-pgf3

GHSA-g9g6-qhrc-p3qc

https://github.com/advisories/GHSA-g9g6-qhrc-p3qc

GHSA-gx3v-q759-g323

https://github.com/advisories/GHSA-gx3v-q759-g323

GHSA-h2x6-g7q6-344v

https://github.com/advisories/GHSA-h2x6-g7q6-344v

GHSA-h56g-4qw7-2mxg

https://github.com/advisories/GHSA-h56g-4qw7-2mxg

GHSA-hg5r-vq93-9fv6

https://github.com/advisories/GHSA-hg5r-vq93-9fv6

GHSA-hgr3-x44x-33hx

https://github.com/advisories/GHSA-hgr3-x44x-33hx

GHSA-j2w3-9c3r-g83q

https://github.com/advisories/GHSA-j2w3-9c3r-g83q

GHSA-j8xr-c56q-m8jj

https://github.com/advisories/GHSA-j8xr-c56q-m8jj

GHSA-jr5x-6h83-wrxf

https://github.com/advisories/GHSA-jr5x-6h83-wrxf

GHSA-m932-crvm-gcp5

https://github.com/advisories/GHSA-m932-crvm-gcp5

GHSA-mg4f-x9v4-6h2p

https://github.com/advisories/GHSA-mg4f-x9v4-6h2p

GHSA-mm7c-rhg6-qr4r

https://github.com/advisories/GHSA-mm7c-rhg6-qr4r

GHSA-p4mj-98mv-xq26

https://github.com/advisories/GHSA-p4mj-98mv-xq26

GHSA-pc73-rj2c-wvf9

https://github.com/advisories/GHSA-pc73-rj2c-wvf9

GHSA-pgqf-926r-548m

https://github.com/advisories/GHSA-pgqf-926r-548m

GHSA-prr9-9mp4-5gp2

https://github.com/advisories/GHSA-prr9-9mp4-5gp2

GHSA-q423-49rw-g9mh

https://github.com/advisories/GHSA-q423-49rw-g9mh

GHSA-q9pg-jj6x-j9p6

https://github.com/advisories/GHSA-q9pg-jj6x-j9p6

GHSA-qf2f-qh6p-7v89

https://github.com/advisories/GHSA-qf2f-qh6p-7v89

GHSA-qqgv-v353-cv8p

https://github.com/advisories/GHSA-qqgv-v353-cv8p

GHSA-rcr6-4jqh-j84m

https://github.com/advisories/GHSA-rcr6-4jqh-j84m

GHSA-rgv6-xp99-6mgj

https://github.com/advisories/GHSA-rgv6-xp99-6mgj

GHSA-rh79-75qm-gwjr

https://github.com/advisories/GHSA-rh79-75qm-gwjr

GHSA-rqhx-647v-wx32

https://github.com/advisories/GHSA-rqhx-647v-wx32

GHSA-rrcw-5rjv-vj26

https://github.com/advisories/GHSA-rrcw-5rjv-vj26

GHSA-rw22-5hhq-pfpf

https://github.com/advisories/GHSA-rw22-5hhq-pfpf

GHSA-v73x-hx65-6pf4

https://github.com/advisories/GHSA-v73x-hx65-6pf4

GHSA-v96j-25gv-g2w9

https://github.com/advisories/GHSA-v96j-25gv-g2w9

GHSA-vrhc-jjfc-m3m3

https://github.com/advisories/GHSA-vrhc-jjfc-m3m3

GHSA-vxv2-8j6r-pcpg

https://github.com/advisories/GHSA-vxv2-8j6r-pcpg

GHSA-w5pg-649r-p6gg

https://github.com/advisories/GHSA-w5pg-649r-p6gg

GHSA-wrf9-r3h7-7x5v

https://github.com/advisories/GHSA-wrf9-r3h7-7x5v

GHSA-wrr5-99h5-gq57

https://github.com/advisories/GHSA-wrr5-99h5-gq57

GHSA-wwqq-x6w4-frm2

https://github.com/advisories/GHSA-wwqq-x6w4-frm2

GHSA-x77v-q46j-393g

https://github.com/advisories/GHSA-x77v-q46j-393g

GHSA-xfq3-qj7j-4565

https://github.com/advisories/GHSA-xfq3-qj7j-4565

GHSA-xmj7-xj85-hfc3

https://github.com/advisories/GHSA-xmj7-xj85-hfc3

GHSA-xv9x-fj9g-vj6h

https://github.com/advisories/GHSA-xv9x-fj9g-vj6h

GHSA-xxjv-752h-3vp2

https://github.com/advisories/GHSA-xxjv-752h-3vp2

Связанные уязвимости

CVE-2025-68938

CVSS3: 5.3

ubuntu

11 месяцев назад

Gitea before 1.25.2 mishandles authorization for deletion of releases.

CVE-2025-68938

CVSS3: 5.4

redhat

11 месяцев назад

Gitea before 1.25.2 mishandles authorization for deletion of releases.

CVE-2025-68938

CVSS3: 5.3

nvd

11 месяцев назад

Gitea before 1.25.2 mishandles authorization for deletion of releases.

CVE-2025-68938

CVSS3: 5.3

debian

11 месяцев назад

Gitea before 1.25.2 mishandles authorization for deletion of releases.

ALT-PU-2025-17085

CVSS3: 5.3

altlinux

больше 1 года назад

ALT-PU-2025-17085: package `gitea` update to version 1.23.3-alt1