git: afa1c64ca18d - main - www/gitea: Update 1.21.11 → 1.22.2 (fixes security vulnerabilities)

Go to: [ bottom of page ] [ top of archives ] [ this month ]
From: Vladimir Druzenko <vvd_at_FreeBSD.org>
Date: Fri, 06 Sep 2024 13:35:55 UTC
The branch main has been updated by vvd:

URL: https://cgit.FreeBSD.org/ports/commit/?id=afa1c64ca18da1f259324283f25e281484e50188

commit afa1c64ca18da1f259324283f25e281484e50188
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2024-09-06 13:32:13 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2024-09-06 13:32:13 +0000

    www/gitea: Update 1.21.11 → 1.22.2 (fixes security vulnerabilities)
    
    Changelogs:
    https://github.com/go-gitea/gitea/releases/tag/v1.22.0
    https://github.com/go-gitea/gitea/releases/tag/v1.22.1
    https://github.com/go-gitea/gitea/releases/tag/v1.22.2
    
    While here replace spaces with tabs in Makefile.
    
    PR:     281298
    MFH:    2024Q3
---
 security/vuxml/vuln/2024.xml | 26 ++++++++++++++++++++++++++
 www/gitea/Makefile           |  9 ++++-----
 www/gitea/distinfo           |  6 +++---
 3 files changed, 33 insertions(+), 8 deletions(-)

diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml
index 21cb6b145c59..f4f89e3aaea7 100644
--- a/security/vuxml/vuln/2024.xml
+++ b/security/vuxml/vuln/2024.xml
@@ -1,3 +1,29 @@
+  <vuln vid="f5d0cfe7-6ba6-11ef-858b-23eeba13701a">
+    <topic>gitea -- multiple issues</topic>
+    <affects>
+      <package>
+	<name>gitea</name>
+	<range><lt>1.22.2</lt></range>
+      </package>
+    </affects>
+    <description>
+       <body xmlns="http://www.w3.org/1999/xhtml">
+       <h1>Problem Description:</h1>
+       <ul>
+       <li>Replace v-html with v-text in search inputbox</li>
+       <li>Fix nuget/conan/container packages upload bugs</li>
+       </ul>
+      </body>
+    </description>
+    <references>
+      <url>https://github.com/go-gitea/gitea/releases/tag/v1.22.2</url>
+    </references>
+    <dates>
+      <discovery>2024-09-03</discovery>
+      <entry>2024-09-05</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="66907dab-6bb2-11ef-b813-4ccc6adda413">
     <topic>qt5-webengine -- Multiple vulnerabilities</topic>
     <affects>
diff --git a/www/gitea/Makefile b/www/gitea/Makefile
index 0e906fae35d6..f0b9d24b29a2 100644
--- a/www/gitea/Makefile
+++ b/www/gitea/Makefile
@@ -1,7 +1,6 @@
 PORTNAME=	gitea
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.21.11
-PORTREVISION=	4
+DISTVERSION=	1.22.2
 CATEGORIES=	www
 MASTER_SITES=	https://github.com/go-gitea/gitea/releases/download/${DISTVERSIONPREFIX}${DISTVERSION}/ \
 		https://dl.gitea.io/gitea/${DISTVERSION}/
@@ -16,7 +15,7 @@ LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	git:devel/git
 
-USES=		cpe gmake go:1.21,no_targets
+USES=		cpe gmake go:1.22,no_targets
 USE_RC_SUBR=	gitea
 
 EXTRACT_AFTER_ARGS=	--strip-components 1 # since 1.17.0, archive includes gitea-src-VERSION directory
@@ -54,8 +53,8 @@ DAEMONARGS=	-f
 SUB_LIST+=	DAEMONARGS="${DAEMONARGS}"
 
 SSP_UNSAFE=	true
-LDFLAGS+=       "'-X "code.gitea.io/gitea/modules/setting.CustomPath=${PREFIX}/etc/gitea"'"
-LDFLAGS+=       "'-X "code.gitea.io/gitea/modules/setting.AppWorkPath=${PREFIX}/share/gitea"'"
+LDFLAGS+=	"'-X "code.gitea.io/gitea/modules/setting.CustomPath=${PREFIX}/etc/gitea"'"
+LDFLAGS+=	"'-X "code.gitea.io/gitea/modules/setting.AppWorkPath=${PREFIX}/share/gitea"'"
 MAKE_ARGS=	GOPATH=${WRKDIR} TAGS="${GO_TAGS}" GOFLAGS="-buildvcs=false"
 ALL_TARGET=	backend
 MAKE_JOBS_UNSAFE=	yes
diff --git a/www/gitea/distinfo b/www/gitea/distinfo
index def33049cfee..4deeecdab0ed 100644
--- a/www/gitea/distinfo
+++ b/www/gitea/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1715269556
-SHA256 (gitea-src-1.21.11.tar.gz) = 4f1cac5f0de555d57f86520bced33e0fbc08a5ea977e0940cbb024d80c679443
-SIZE (gitea-src-1.21.11.tar.gz) = 54029294
+TIMESTAMP = 1725555216
+SHA256 (gitea-src-1.22.2.tar.gz) = 8c2f2cdac0b0403dfe99198064fcc1cd92c560e31072e550da3fc9c49a22c05d
+SIZE (gitea-src-1.22.2.tar.gz) = 54444512