git: d128625bc57f - main - security/vuxml: Document gitea < 1.27.3 vulnerabilities

Go to: [ bottom of page ] [ top of archives ] [ this month ]
From: Yusuf Yaman <nxjoseph_at_FreeBSD.org>
Date: Sun, 13 Sep 2026 22:49:26 UTC
The branch main has been updated by nxjoseph:

URL: https://cgit.FreeBSD.org/ports/commit/?id=d128625bc57f616d35a9aa83497e6e607c0665b8

commit d128625bc57f616d35a9aa83497e6e607c0665b8
Author:     Yusuf Yaman <nxjoseph@FreeBSD.org>
AuthorDate: 2026-09-13 22:47:11 +0000
Commit:     Yusuf Yaman <nxjoseph@FreeBSD.org>
CommitDate: 2026-09-13 22:48:11 +0000

    security/vuxml: Document gitea < 1.27.3 vulnerabilities
    
    Gitea 1.27.3 fixes 26 security issues, hardens issue searching
    that an unfiltered query no longer enumerates every public
    repository into the indexer filter and removes unsafe code
    from the internal private endpoints.
    
    PR:             298072
    Approved by:    osa, vvd (Mentors, implicit)
---
 security/vuxml/vuln/2026.xml | 56 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 56 insertions(+)

diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml
index d00becdeb0c1..6a4f629c86fd 100644
--- a/security/vuxml/vuln/2026.xml
+++ b/security/vuxml/vuln/2026.xml
@@ -1,3 +1,59 @@
+  <vuln vid="fac18f5f-afc2-11f1-8266-3c7c3fba4204">
+    <topic>Gitea -- multiple vulnerabilities</topic>
+    <affects>
+	<package>
+	  <name>gitea</name>
+	  <range><lt>1.27.3</lt></range>
+	</package>
+    </affects>
+    <description>
+	<body xmlns="http://www.w3.org/1999/xhtml">
+	<p>Gitea reports:</p>
+	<blockquote cite="https://blog.gitea.com/release-of-1.27.3/">
+	<p>This release contains fixes for 26 security issues,
+	hardens issue searching that an unfiltered query no longer
+	enumerates every public repository into the indexer filter
+	and removes unsafe code from the internal private endpoints.
+	Please upgrade as soon as possible.
+	</p>
+	</blockquote>
+	</body>
+    </description>
+    <references>
+      <cvename>CVE-2026-66877</cvename>
+      <cvename>CVE-2026-71184</cvename>
+      <cvename>CVE-2026-68957</cvename>
+      <cvename>CVE-2026-60010</cvename>
+      <cvename>CVE-2026-70406</cvename>
+      <cvename>CVE-2026-63792</cvename>
+      <cvename>CVE-2026-66874</cvename>
+      <cvename>CVE-2026-68964</cvename>
+      <cvename>CVE-2026-67577</cvename>
+      <cvename>CVE-2026-66849</cvename>
+      <cvename>CVE-2026-73135</cvename>
+      <cvename>CVE-2026-78433</cvename>
+      <cvename>CVE-2026-70407</cvename>
+      <cvename>CVE-2026-73126</cvename>
+      <cvename>CVE-2026-70400</cvename>
+      <cvename>CVE-2026-70396</cvename>
+      <cvename>CVE-2026-63021</cvename>
+      <cvename>CVE-2026-62925</cvename>
+      <cvename>CVE-2026-73273</cvename>
+      <cvename>CVE-2026-60021</cvename>
+      <cvename>CVE-2026-60018</cvename>
+      <cvename>CVE-2026-73130</cvename>
+      <cvename>CVE-2026-70402</cvename>
+      <cvename>CVE-2026-66853</cvename>
+      <cvename>CVE-2026-71301</cvename>
+      <cvename>CVE-2026-73504</cvename>
+      <url>https://blog.gitea.com/release-of-1.27.3/</url>
+    </references>
+    <dates>
+      <discovery>2026-08-29</discovery>
+      <entry>2026-09-13</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="e627950e-ad4f-11f1-8656-000af7b98cf6">
     <topic>strongSwan -- multiple vulnerabilities</topic>
     <affects>