openSUSE-SU-2026:21603-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21603-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/openSUSE-SU-2026:21603-1
Upstream
CVE (7)
Related
Published
2026-08-18T16:01:16Z
Modified
2026-08-21T18:23:47Z
Summary
Security update for gitea-tea
Details

This update for gitea-tea fixes the following issues:

Changes in gitea-tea:

  • Update to 0.15.1, bringing in the 0.14.2/0.15.0/0.15.1 upstream changes below (bsc#1253576):

    • CVE-2025-47913: golang.org/x/crypto/ssh/agent client process termination on an unexpected response to a key listing or signing request, fixed by the vendored x/crypto bump to 0.54.0 (fix floor is 0.43.0 per GO-2025-4116)
  • update to 0.15.1:

    • f34697c5ed chore(config): replace authgate SDK with signet (#1081)
    • a613a344de fix(test): disable gpg signing in worktree test repo (#1072)
    • 6435b12202 chore(deps): pin dependencies (#1064)
  • update to 0.15.0:

    • fix(context): clarify the fallback login prompt wording in #1061
    • Fix notifications --mine outside git repositories in #1056
    • feat(assignees): add set, add, and remove assignees APIs in #1045
    • fix(deps): update go dependencies in #1057
    • fix(deps): update go dependencies in #1051
    • fix(theme): don't query the terminal at start-up in #1054
    • upgrade go sdk and add test in #1048
    • feat(comments): accept -d/--description for comment body in #1043
    • Add reply to code review in #978
    • fix(http): add transport timeouts so tea fails fast on stalled servers in #1020
    • fix(config): write to keychain before config in #1044
  • Update to version 0.14.2:

    • fix(labels): add org label for ls and pr
    • fix(oauth): pass resolved redirect_uri to token exchange
    • feat(pulls): show PR URL in detail view
    • feat(comments): add list/edit/delete subcommands to tea comment
    • feat(pulls): add --draft to create and --draft/--ready to edit
    • fix(pulls): restore standard fork-flow PR creation
    • fix(comment): don't block on stdin when body is given positionally
    • docs(login): make the git credential helper discoverable
    • fix(print): distinguish draft PRs from conflicting PRs
    • feat: add wiki CLI commands
    • fix(context): improve local repo detection logic and test
References

Affected packages

openSUSE:Leap 16.0 / gitea-tea

Package

Name
gitea-tea
Purl
pkg:rpm/opensuse/gitea-tea&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.15.1-bp160.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "gitea-tea":  "0.15.1-bp160.1.1",
            "gitea-tea-bash-completion":  "0.15.1-bp160.1.1",
            "gitea-tea-zsh-completion":  "0.15.1-bp160.1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21603-1.json"