openSUSE-SU-2026:20318-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20318-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:20318-1
Upstream
CVE (2)
Related
CVE (2)
Published
2026-03-03T14:44:11Z
Modified
2026-03-12T02:07:10Z
Summary
Security update for gitea-tea
Details

This update for gitea-tea fixes the following issues:

Changes in gitea-tea:

  • update to 0.12.0:
    • New Features
      • Add tea actions commands for managing workflow runs and workflows in #880, #796
      • Add tea api subcommand for arbitrary API calls not covered by existing commands in #879
      • Add repository webhook management commands in #798
      • Add JSON output support for single PR view in #864
      • Add JSON output and file redirection for issue detail view in #841
      • Support creating AGit flow pull requests in #867
    • Bug Fixes
      • Fix authentication via environment variables when specifying repo argument in #809
      • Fix issue detail view ignoring --owner flag in #899
      • Fix PR create crash in #823
      • Fix TTY prompt handling in #897
      • Fix termenv OSC RGBA handling in #907
      • Fix labels delete command and --id flag type in #865
      • Fix delete repo command description in #858
      • Fix pagination flags for secrets list, webhooks list, and pull requests list in #853, #852,
      • #851
      • Enable git worktree support and improve PR create error handling in #850
      • Only prompt for SSH passphrase when necessary in #844
      • Only prompt for login confirmation when no default login is set in #839
      • Skip token uniqueness check when using SSH authentication in #898
      • Require non-empty token in GetLoginByToken in #895
      • Fix config file permissions to remove group read/write in #856
    • Improvements
      • Add file locking for safe concurrent access to config file in #881
      • Improve error messages throughout the CLI in #871
      • Send consistent HTTP request headers in #888
      • Revert requiring HTTP/HTTPS login URLs; restore SSH as a login method in #891
      • Refactor context into dedicated subpackages in #873, #888
      • General code cleanup and improvements in #869, #870
      • Add test coverage for login matching in #820
    • Build & Dependencies
      • Build with Go 1.25 in #886
      • Build for Windows aarch64
      • Update Gitea SDK version in #868
      • Update Nix flake in #872
      • Update dependencies including lipgloss v2, urfave/cli v3.6.2, go-git v5.16.5, and various Go modules in #849, #875, #876, #878, #884, #885, #900, #901, #904, #905
      • Update CI actions (checkout v6, setup-go v6) in #882, #883
References

Affected packages

openSUSE:Leap 16.0 / gitea-tea

Package

Name
gitea-tea
Purl
pkg:rpm/opensuse/gitea-tea&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.12.0-bp160.1.1

Ecosystem specific 

{
    "binaries":  [
        {
            "gitea-tea":  "0.12.0-bp160.1.1",
            "gitea-tea-bash-completion":  "0.12.0-bp160.1.1",
            "gitea-tea-zsh-completion":  "0.12.0-bp160.1.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:20318-1.json"