git: 86f62d30a8b5 - main - www/gitlab-ce: Security update to 14.8.2
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 09 Mar 2022 10:09:03 UTC
The branch main has been updated by mfechner:
URL: https://cgit.FreeBSD.org/ports/commit/?id=86f62d30a8b515d314db36c82e6bab75a2311159
commit 86f62d30a8b515d314db36c82e6bab75a2311159
Author: Matthias Fechner <mfechner@FreeBSD.org>
AuthorDate: 2022-03-09 09:18:16 +0000
Commit: Matthias Fechner <mfechner@FreeBSD.org>
CommitDate: 2022-03-09 10:07:56 +0000
www/gitlab-ce: Security update to 14.8.2
Changelog:
https://about.gitlab.com/releases/2022/02/23/gitlab-14-8-1-released/
https://about.gitlab.com/releases/2022/02/25/critical-security-release-gitlab-14-8-2-released/
https://gitlab.com/gitlab-org/gitlab-foss/-/blob/master/CHANGELOG.md
14.8.2 (2022-02-25)
Security (8 changes)
Limit commands_changes to certain keys (merge request)
Add runners_token prefix to Group and Project (merge request)
Anonymous user can enumerate all users through GraphQL endpoint (merge request)
Check for unsafe characters in email addresses before sending (merge request)
Warn when snippet contains unretrievable files (merge request)
Prevent DOS when rendering math markdown (merge request)
Check permission when creating members through service (merge request)
Reset password field on page load (merge request)
14.8.1 (2022-02-23)
Fixed (3 changes)
Allow assigning users with private profiles with quick-actions (merge request)
Stop backup files from requiring directories to exist when skipped (merge request)
Fix toolbar buttons in Markdown field (merge request)
Security: 2823048d-9f8f-11ec-8c9c-001b217b3468
---
www/gitlab-ce/Makefile | 4 ++--
www/gitlab-ce/distinfo | 6 +++---
www/gitlab-workhorse/Makefile | 4 ++--
www/gitlab-workhorse/distinfo | 6 +++---
4 files changed, 10 insertions(+), 10 deletions(-)
diff --git a/www/gitlab-ce/Makefile b/www/gitlab-ce/Makefile
index e2d8efc275d8..c4700a883383 100644
--- a/www/gitlab-ce/Makefile
+++ b/www/gitlab-ce/Makefile
@@ -1,7 +1,7 @@
# Created by: Torsten Zuehlsdorff <tz@FreeBSD.org>
PORTNAME= gitlab-ce
-PORTVERSION= 14.8.0
+PORTVERSION= 14.8.2
PORTREVISION= 0
CATEGORIES= www devel
@@ -275,7 +275,7 @@ USE_GITLAB= yes
GL_ACCOUNT= gitlab-org
GL_PROJECT= gitlab-foss
# Find the here: https://gitlab.com/gitlab-org/gitlab-foss/-/tags
-GL_COMMIT= 3f274363e9dc9a1be75edfcd3dd5adb64b1e8c29
+GL_COMMIT= c7be43f6dd37211709111be3796af9e1f00d3713
USERS= git
GROUPS= git
diff --git a/www/gitlab-ce/distinfo b/www/gitlab-ce/distinfo
index cfcf381fbb50..f37126b2ac6a 100644
--- a/www/gitlab-ce/distinfo
+++ b/www/gitlab-ce/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1645606465
-SHA256 (gitlab-org-gitlab-foss-3f274363e9dc9a1be75edfcd3dd5adb64b1e8c29_GL0.tar.gz) = 8ac2d2bb30f954cc3caa8b29e648d3136bf29a2aa066fc1ce417b9065d5c5b5a
-SIZE (gitlab-org-gitlab-foss-3f274363e9dc9a1be75edfcd3dd5adb64b1e8c29_GL0.tar.gz) = 102523804
+TIMESTAMP = 1646815687
+SHA256 (gitlab-org-gitlab-foss-c7be43f6dd37211709111be3796af9e1f00d3713_GL0.tar.gz) = e0e016834ca975918d229d77151cae644cdd2f7f64d5902b3c80b90cfe63a299
+SIZE (gitlab-org-gitlab-foss-c7be43f6dd37211709111be3796af9e1f00d3713_GL0.tar.gz) = 102527800
diff --git a/www/gitlab-workhorse/Makefile b/www/gitlab-workhorse/Makefile
index 684820ce08e4..6051c3b783f3 100644
--- a/www/gitlab-workhorse/Makefile
+++ b/www/gitlab-workhorse/Makefile
@@ -1,7 +1,7 @@
# Created by: Torsten Zuehlsdorff <tz@FreeBSD.org>
PORTNAME= gitlab-workhorse
-PORTVERSION= 14.8.0
+PORTVERSION= 14.8.2
PORTREVISION= 0
CATEGORIES= www
@@ -25,7 +25,7 @@ USE_GITLAB= yes
GL_ACCOUNT= gitlab-org
GL_PROJECT= gitlab-foss
# Find the commit hash here: https://gitlab.com/gitlab-org/gitlab-foss/-/tags
-GL_COMMIT= 3f274363e9dc9a1be75edfcd3dd5adb64b1e8c29
+GL_COMMIT= c7be43f6dd37211709111be3796af9e1f00d3713
# for go dependencies
USE_GITHUB= nodefault
diff --git a/www/gitlab-workhorse/distinfo b/www/gitlab-workhorse/distinfo
index e7f2d43e3539..42c51f45e116 100644
--- a/www/gitlab-workhorse/distinfo
+++ b/www/gitlab-workhorse/distinfo
@@ -1,4 +1,4 @@
-TIMESTAMP = 1646778762
+TIMESTAMP = 1646815663
SHA256 (Azure-azure-pipeline-go-v0.2.3_GH0.tar.gz) = 99bd58f4a07dd02d9615e3638b3bb6dbfad80ef678ccdb8e17e3fa2b0fef343e
SIZE (Azure-azure-pipeline-go-v0.2.3_GH0.tar.gz) = 17102
SHA256 (Azure-azure-storage-blob-go-v0.13.0_GH0.tar.gz) = 6bf7145210331efa3f0417f6684cf764c22743cf23122048ec136600daebf443
@@ -199,8 +199,8 @@ SHA256 (uber-jaeger-client-go-v2.27.0_GH0.tar.gz) = 7590acdefcbbf9553bd3415bc7e5
SIZE (uber-jaeger-client-go-v2.27.0_GH0.tar.gz) = 210139
SHA256 (uber-jaeger-lib-v2.4.1_GH0.tar.gz) = c178bcad325857dba29551c16f40707701adf6e3a9e01e1ca3e5edfc3c6de8bc
SIZE (uber-jaeger-lib-v2.4.1_GH0.tar.gz) = 38010
-SHA256 (gitlab-org-gitlab-foss-3f274363e9dc9a1be75edfcd3dd5adb64b1e8c29_GL0.tar.gz) = 8ac2d2bb30f954cc3caa8b29e648d3136bf29a2aa066fc1ce417b9065d5c5b5a
-SIZE (gitlab-org-gitlab-foss-3f274363e9dc9a1be75edfcd3dd5adb64b1e8c29_GL0.tar.gz) = 102523804
+SHA256 (gitlab-org-gitlab-foss-c7be43f6dd37211709111be3796af9e1f00d3713_GL0.tar.gz) = e0e016834ca975918d229d77151cae644cdd2f7f64d5902b3c80b90cfe63a299
+SIZE (gitlab-org-gitlab-foss-c7be43f6dd37211709111be3796af9e1f00d3713_GL0.tar.gz) = 102527800
SHA256 (gitlab-org-gitaly-df7dadcc3f74276a7176234d4b1475299f46c05c_GL0.tar.gz) = 4c403ee52c1d42d54e9acd14026796782e8272e74c8eb7c3cedf9c924697647e
SIZE (gitlab-org-gitaly-df7dadcc3f74276a7176234d4b1475299f46c05c_GL0.tar.gz) = 3703056
SHA256 (gitlab-org-golang-archive-zip-84007c99e03b62ee4dc62a94048d6e59552299d7_GL0.tar.gz) = 103a3e806657de5e2c7844326146c88490089fa8d07784270c359b5f5a8d06be