Gitea: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

Summary

Product

Vulnerabilities 1

• Critical 9.1
  CVE-2024-45337 Public exploit

  Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto

  Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function do…

  golang.org/x/crypto golang.org/x/crypto/ssh katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 11, 2024

Revision history

1. 2026-08-20 #46

   Neue Updates von openSUSE aufgenommen

2. 2026-07-08 #45

   Neue Updates von Red Hat aufgenommen

3. 2026-06-18 #44

   Neue Updates von IBM aufgenommen

4. 2026-06-08 #43

   Neue Updates von Amazon aufgenommen

5. 2026-04-26 #42

   Neue Updates von SUSE aufgenommen

6. 2026-02-22 #41

   Neue Updates von SUSE aufgenommen

7. 2026-02-16 #40

   Neue Updates von Red Hat aufgenommen

8. 2026-02-02 #39

   Neue Updates von Red Hat aufgenommen

9. 2025-12-15 #38

   Neue Updates von Red Hat aufgenommen

10. 2025-12-10 #37

    Neue Updates von Red Hat aufgenommen

11. 2025-12-07 #36

    Neue Updates von openSUSE aufgenommen

12. 2025-11-27 #35

    Neue Updates von Red Hat aufgenommen

13. 2025-11-03 #34

    Neue Updates von Ubuntu aufgenommen

14. 2025-11-02 #33

    Neue Updates von openSUSE aufgenommen

15. 2025-10-23 #32

    Neue Updates von Ubuntu aufgenommen

16. 2025-10-01 #31

    Neue Updates von Splunk-SVD aufgenommen

17. 2025-07-31 #30

    Neue Updates von SUSE aufgenommen

18. 2025-07-27 #29

    Neue Updates von Fedora aufgenommen

19. 2025-07-20 #28

    Neue Updates von Red Hat aufgenommen

20. 2025-07-07 #27

    Neue Updates von Splunk-SVD aufgenommen

21. 2025-06-03 #26

    Neue Updates von SUSE aufgenommen

22. 2025-06-02 #25

    Neue Updates von Splunk-SVD aufgenommen

23. 2025-04-09 #24

    Neue Updates von IBM aufgenommen

24. 2025-04-02 #23

    Neue Updates von Red Hat aufgenommen

25. 2025-03-25 #22

    Neue Updates von openSUSE aufgenommen

References

• Gitea Release Notes vom 2024-12-11
  https://blog.gitea.com/release-of-1.22.5
• Fedora Security Advisory FEDORA-2024-8F83D0ED92 vom 2024-12-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-8f83d0ed92
• Fedora Security Advisory FEDORA-2024-C33C95804E vom 2024-12-13
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-c33c95804e
• Fedora Security Advisory FEDORA-2024-6267B82CF7 vom 2024-12-15
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-6267b82cf7
• openSUSE Security Update OPENSUSE-SU-2024:14585-1 vom 2024-12-17
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/3VJBDKTY25NRJXFRK6QZSRH6ZRBUV2UT/
• openSUSE Security Update OPENSUSE-SU-2024:14590-1 vom 2024-12-17
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RFAKX3BHM5IEGVFZW5ORK472VJQ7GAKL/
• openSUSE Security Update OPENSUSE-SU-2024:14602-1 vom 2024-12-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/KJENUST4DVKPMGTJHYGQFE57E55AQQDC/
• Fedora Security Advisory FEDORA-2024-8D1B3F4466 vom 2024-12-22
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-8d1b3f4466
• Fedora Security Advisory FEDORA-2024-F2A4FFC1FF vom 2024-12-23
  https://bodhi.fedoraproject.org/updates/FEDORA-2024-f2a4ffc1ff
• Fedora Security Advisory FEDORA-EPEL-2024-CC57767755 vom 2024-12-22
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-cc57767755
• openSUSE Security Update OPENSUSE-SU-2025:14633-1 vom 2025-01-13
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VJK5RQOOJ3Q26ODJIGOXXYOYQDDEQ3UX/
• Red Hat Security Advisory RHSA-2025:0386 vom 2025-01-16
  https://access.redhat.com/errata/RHSA-2025:0386
• Red Hat Security Advisory RHSA-2025:0385 vom 2025-01-16
  https://access.redhat.com/errata/RHSA-2025:0385
• Red Hat Security Advisory RHSA-2025:0560 vom 2025-01-21
  https://access.redhat.com/errata/RHSA-2025:0560
• Red Hat Security Advisory RHSA-2025:0576 vom 2025-01-22
  https://access.redhat.com/errata/RHSA-2025:0576
• Red Hat Security Advisory RHSA-2025:0552 vom 2025-01-21
  https://access.redhat.com/errata/RHSA-2025:0552
• Red Hat Security Advisory RHSA-2025:0577 vom 2025-01-22
  https://access.redhat.com/errata/RHSA-2025:0577
• Red Hat Security Advisory RHSA-2025:0679 vom 2025-01-23
  https://access.redhat.com/errata/RHSA-2025:0679
• Red Hat Security Advisory RHSA-2025:0676 vom 2025-01-23
  https://access.redhat.com/errata/RHSA-2025:0676
• Red Hat Security Advisory RHSA-2025:0723 vom 2025-01-27
  https://access.redhat.com/errata/RHSA-2025:0723
• Red Hat Security Advisory RHSA-2025:0653 vom 2025-01-28
  https://access.redhat.com/errata/RHSA-2025:0653
• Red Hat Security Advisory RHSA-2025:0778 vom 2025-01-28
  https://access.redhat.com/errata/RHSA-2025:0778
• Red Hat Security Advisory RHSA-2025:0785 vom 2025-01-28
  https://access.redhat.com/errata/RHSA-2025:0785
• Red Hat Security Advisory RHSA-2025:0649 vom 2025-01-29
  https://access.redhat.com/errata/RHSA-2025:0649
• Red Hat Security Advisory RHSA-2025:0645 vom 2025-01-29
  https://access.redhat.com/errata/RHSA-2025:0645
• Red Hat Security Advisory RHSA-2025:0892 vom 2025-02-03
  https://access.redhat.com/errata/RHSA-2025:0892
• Amazon Linux Security Advisory ALAS-2025-2749 vom 2025-02-04
  https://alas.aws.amazon.com/AL2/ALAS-2025-2749.html
• SUSE Security Update SUSE-SU-2025:0601-1 vom 2025-02-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/SIJ4IQWT54OKAPQJZ73TJULOUB4K7WWI/
• SUSE Security Update SUSE-SU-2025:0602-1 vom 2025-02-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EYS6XJJZTICQN34VXVLGODHFCRCYXES4/
• Red Hat Security Advisory RHSA-2025:1829 vom 2025-02-25
  https://access.redhat.com/errata/RHSA-2025:1829
• Red Hat Security Advisory RHSA-2024:6121 vom 2025-02-25
  https://access.redhat.com/errata/RHSA-2024:6121
• Red Hat Security Advisory RHSA-2025:1824 vom 2025-02-25
  https://access.redhat.com/errata/RHSA-2025:1824
• Red Hat Security Advisory RHSA-2025:1841 vom 2025-02-26
  https://access.redhat.com/errata/RHSA-2025:1841
• Red Hat Security Advisory RHSA-2025:1866 vom 2025-02-26
  https://access.redhat.com/errata/RHSA-2025:1866
• Red Hat Security Advisory RHSA-2025:1865 vom 2025-02-26
  https://access.redhat.com/errata/RHSA-2025:1865
• Red Hat Security Advisory RHSA-2025:1710 vom 2025-02-27
  https://access.redhat.com/errata/RHSA-2025:1710
• SUSE Security Update SUSE-SU-2025:0770-1 vom 2025-03-03
  https://lists.suse.com/pipermail/sle-security-updates/2025-March/020477.html
• openSUSE Security Update OPENSUSE-SU-2025:0094-1 vom 2025-03-20
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LKOLRH73CIQLMQ327IYGUHNSFKCU5MPI/
• openSUSE Security Update OPENSUSE-SU-2025:14920-1 vom 2025-03-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/OAFVZYRPJ63SNIOTJJCDPNRWHGLE355Q/
• Red Hat Security Advisory RHSA-2025:3542 vom 2025-04-02
  https://access.redhat.com/errata/RHSA-2025:3542
• Red Hat Security Advisory RHSA-2025:3560 vom 2025-04-03
  https://access.redhat.com/errata/RHSA-2025:3560
• IBM Security Bulletin 7230494 vom 2025-04-09
  https://www.ibm.com/support/pages/node/7230494
• Splunk Security Advisory SVD-2025-0603 vom 2025-06-02
  https://advisory.splunk.com//advisories/SVD-2025-0603
• Splunk Security Advisory SVD-2025-0604 vom 2025-06-02
  https://advisory.splunk.com/advisories/SVD-2025-0604
• SUSE Security Update SUSE-SU-2025:20196-1 vom 2025-06-04
  https://lists.suse.com/pipermail/sle-security-updates/2025-June/021144.html
• Splunk Security Advisory SVD-2025-0710 vom 2025-07-07
  https://advisory.splunk.com//advisories/SVD-2025-0710
• Red Hat Security Advisory RHSA-2025:11396 vom 2025-07-18
  https://access.redhat.com/errata/RHSA-2025:11396
• Fedora Security Advisory FEDORA-EPEL-2025-AB0FAE74F1 vom 2025-07-26
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-ab0fae74f1
• SUSE Security Update SUSE-SU-2025:02581-1 vom 2025-07-31
  https://lists.suse.com/pipermail/sle-security-updates/2025-July/021999.html
• Splunk Security Advisory SVD-2025-1007 vom 2025-10-01
  https://advisory.splunk.com//advisories/SVD-2025-1007
• Ubuntu Security Notice USN-7839-1 vom 2025-10-23
  https://ubuntu.com/security/notices/USN-7839-1
• openSUSE Security Update OPENSUSE-SU-2025:0417-1 vom 2025-11-02
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FCZZE45L3ODYBW7TQ5RNDVMFSOSJDYIF/
• openSUSE Security Update OPENSUSE-SU-2025:0418-1 vom 2025-11-02
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/22IZAW3SCK7W2J22FWPUPS2FYXUTLUTJ/
• Ubuntu Security Notice USN-7839-2 vom 2025-11-03
  https://ubuntu.com/security/notices/USN-7839-2
• Red Hat Security Advisory RHSA-2025:22287 vom 2025-11-27
  https://access.redhat.com/errata/RHSA-2025:22287
• openSUSE Security Update OPENSUSE-SU-2025-20143-1 vom 2025-12-05
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SA2FH57FMWGQVYC3SRSZ25NB6ME2DDCT/
• Red Hat Security Advisory RHSA-2025:23064 vom 2025-12-10
  https://access.redhat.com/errata/RHSA-2025:23064
• Red Hat Security Advisory RHSA-2025:23061 vom 2025-12-10
  https://access.redhat.com/errata/RHSA-2025:23061
• Red Hat Security Advisory RHSA-2025:23203 vom 2025-12-15
  https://access.redhat.com/errata/RHSA-2025:23203
• Red Hat Security Advisory RHSA-2025:23206 vom 2025-12-15
  https://access.redhat.com/errata/RHSA-2025:23206
• Red Hat Security Advisory RHSA-2025:23207 vom 2025-12-15
  https://access.redhat.com/errata/RHSA-2025:23207
• Red Hat Security Advisory RHSA-2026:1730 vom 2026-02-02
  https://access.redhat.com/errata/RHSA-2026:1730
• Red Hat Security Advisory RHSA-2026:2681 vom 2026-02-16
  https://access.redhat.com/errata/RHSA-2026:2681
• Red Hat Security Advisory RHSA-2026:2754 vom 2026-02-16
  https://access.redhat.com/errata/RHSA-2026:2754
• Red Hat Security Advisory RHSA-2026:2762 vom 2026-02-16
  https://access.redhat.com/errata/RHSA-2026:2762
• SUSE Security Update SUSE-SU-2026:0592-1 vom 2026-02-21
  https://lists.suse.com/pipermail/sle-security-updates/2026-February/024365.html
• SUSE Security Update SUSE-SU-2026:21319-1 vom 2026-04-27
  https://lists.suse.com/pipermail/sle-security-updates/2026-April/025673.html
• Amazon Linux Security Advisory ALAS2-2026-3334 vom 2026-06-09
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3334.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2026-108 vom 2026-06-08
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2026-108.html
• Amazon Linux Security Advisory ALAS2DOCKER-2026-128 vom 2026-06-08
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2026-128.html
• Amazon Linux Security Advisory ALAS2DOCKER-2026-127 vom 2026-06-08
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2026-127.html
• Amazon Linux Security Advisory ALAS2DOCKER-2026-126 vom 2026-06-08
  https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2026-126.html
• Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2026-109 vom 2026-06-08
  https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2026-109.html
• IBM Security Bulletin 7277096 vom 2026-06-19
  https://www.ibm.com/support/pages/node/7277096
• Red Hat Security Advisory RHSA-2026:36808 vom 2026-07-08
  https://access.redhat.com/errata/RHSA-2026:36808
• openSUSE Security Update OPENSUSE-SU-2026:21603-1 vom 2026-08-21
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TWPAIYUMTTVXMJUNUAHK246MCDXP5FN4/