git: 4a4015c6e349 - main - www/gitea: update 1.23.6 => 1.23.8 (fix security issues)
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 22 May 2025 20:02:17 UTC
The branch main has been updated by vvd:
URL: https://cgit.FreeBSD.org/ports/commit/?id=4a4015c6e349864b1f35a5b7a44dba55a117d689
commit 4a4015c6e349864b1f35a5b7a44dba55a117d689
Author: Chris Hutchinson <portmaster@bsdforge.com>
AuthorDate: 2025-05-22 19:48:17 +0000
Commit: Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2025-05-22 20:00:48 +0000
www/gitea: update 1.23.6 => 1.23.8 (fix security issues)
Security:
- Fixed a bug when uploading files via the LFS SSH command
(affects 1.23)
- Resolved CVE-2025-22873 in the Go os package, which previously
allowed improper access to parent directories under certain conditions
Release notes:
https://blog.gitea.com/release-of-1.23.7/
https://blog.gitea.com/release-of-1.23.8/
Changelogs:
https://github.com/go-gitea/gitea/releases/tag/v1.23.7
https://github.com/go-gitea/gitea/releases/tag/v1.23.8
While here improve port:
- remove go version after default go version was increased to 1.24
- update WWW
- align options
PR: 286828
Approved by: Stefan Bethke <stb@lassitu.de> (maintainer, implicit - fix security issues)
Security: CVE-2025-22873
---
www/gitea/Makefile | 17 ++++++++---------
www/gitea/distinfo | 6 +++---
2 files changed, 11 insertions(+), 12 deletions(-)
diff --git a/www/gitea/Makefile b/www/gitea/Makefile
index 977f1b9cd1d1..dce5dc6f1e97 100644
--- a/www/gitea/Makefile
+++ b/www/gitea/Makefile
@@ -1,7 +1,6 @@
PORTNAME= gitea
DISTVERSIONPREFIX= v
-DISTVERSION= 1.23.6
-PORTREVISION= 1
+DISTVERSION= 1.23.8
CATEGORIES= www
MASTER_SITES= https://github.com/go-gitea/gitea/releases/download/${DISTVERSIONPREFIX}${DISTVERSION}/ \
https://dl.gitea.io/gitea/${DISTVERSION}/
@@ -9,14 +8,14 @@ DISTNAME= gitea-src-${DISTVERSION}
MAINTAINER= stb@lassitu.de
COMMENT= Compact self-hosted Git service
-WWW= https://gitea.io/en-US/
+WWW= https://gitea.com/
LICENSE= MIT
LICENSE_FILE= ${WRKSRC}/LICENSE
RUN_DEPENDS= git:devel/git
-USES= cpe gmake go:1.23,no_targets
+USES= cpe gmake go:no_targets
USE_RC_SUBR= gitea
EXTRACT_AFTER_ARGS= --strip-components 1 # since 1.17.0, archive includes gitea-src-VERSION directory
@@ -30,18 +29,18 @@ GROUPS= git
PORTDATA= *
-OPTIONS_DEFINE= BINDATA GIT_LFS PAM SQLITE
+OPTIONS_DEFINE= BINDATA GIT_LFS PAM SQLITE
OPTIONS_DEFAULT= GIT_LFS PAM SQLITE
-OPTIONS_SUB= yes
+OPTIONS_SUB= yes
BINDATA_DESC= Build a single monolithic binary, with all assets included
GIT_LFS_DESC= Support for Git Large File Storage (LFS)
PAM_DESC= Enable support for PAM
-BINDATA_VARS= GO_TAGS+=bindata
+BINDATA_VARS= GO_TAGS+=bindata
GIT_LFS_RUN_DEPENDS= git-lfs:devel/git-lfs
-PAM_VARS= GO_TAGS+=pam
-SQLITE_VARS= GO_TAGS+="sqlite sqlite_unlock_notify"
+PAM_VARS= GO_TAGS+=pam
+SQLITE_VARS= GO_TAGS+="sqlite sqlite_unlock_notify"
.include <bsd.port.options.mk>
diff --git a/www/gitea/distinfo b/www/gitea/distinfo
index ccbc74f10126..cff6db15cdc5 100644
--- a/www/gitea/distinfo
+++ b/www/gitea/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1743171461
-SHA256 (gitea-src-1.23.6.tar.gz) = 7704ebce0e31617d9dad985d3f3f4828855ad856383b9efc5a2f81befbed693c
-SIZE (gitea-src-1.23.6.tar.gz) = 55397368
+TIMESTAMP = 1747455860
+SHA256 (gitea-src-1.23.8.tar.gz) = 0ff96c1b7cc0960b5b9d34bd978cedc0f856a168654838bdef3551621f049717
+SIZE (gitea-src-1.23.8.tar.gz) = 55482190