[Bug 291575] devel/gogs: Update to 0.14.2

In reply to: bugzilla-noreply_a_freebsd.org: "[Bug 291575] devel/gogs: path traversal leading to RCE"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: <bugzilla-noreply_at_freebsd.org>
Date: Tue, 10 Mar 2026 13:04:19 UTC

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291575

Siva Mahadevan <siva@FreeBSD.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|https://github.com/gogs/gog |https://github.com/gogs/gog
                   |s/issues/8071               |s/releases/tag/v0.14.2
             Status|Open                        |In Progress
           Assignee|ports-bugs@FreeBSD.org      |siva@FreeBSD.org

--- Comment #8 from Siva Mahadevan <siva@FreeBSD.org> ---
@polarian thanks for the great starting point in the patch! I had a patch
prepared locally for a while, but couldn't figure out why it wasn't fetching.
Turns out, the GO_MODULE has changed.

There are a few issues in the patch, like autogenerated lines such as
'libexec/gogs/conf/%%GOGS_USER%%ignore/Actionscript' in pkg-plist. I'll fix
those up and get this patch in asap.

-- 
You are receiving this mail because:
You are the assignee for the bug.