Gitea 28.2 Fixes Nine Security Vulnerabilities

Gitea, the popular open-source, self-hosted Git service, has released version 28.2, the second maintenance update in the 28.x series, addressing multiple security vulnerabilities and bug fixes affecting Actions, PRs, authentication, and package management. The developers disclosed 12 vulnerabilities, nine fixed in version 28.2. The remaining three were addressed in earlier releases but are now publicly disclosed. Among the most serious issues is CVE-2026-109553, an SSH authentication flaw involving improper validation of certificate principals. Under certain configurations, an attacker could a

https://linuxiac.com/gitea-28-2-fixes-nine-security-vulnerabilities/

Image: