SUSE Package Hub - openSUSE-2025-94

Update Info

openSUSE-2025-94

Security update for gitea-tea

Type: security

Severity: moderate

Issued: 2025-03-20

Description:

This update for gitea-tea fixes the following issues:

- gitea-te: update newer dependencies to fix security issues (boo#1235367 boo#1239493 boo#1234598)

References

CVE: CVE-2025-22869
CVE: CVE-2024-45338
CVE: CVE-2024-45337
Bugzilla: 1239493 VUL-0: CVE-2025-22869: gitea-tea: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh
Bugzilla: 1235367 VUL-0: CVE-2024-45338: gitea-tea: golang.org/x/net/html: denial of service due to non-linear parsing of case-insensitive content
Bugzilla: 1234598 VUL-0: CVE-2024-45337: gitea-tea: golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Packages

gitea-tea-0.9.2-bp156.5.1