Bug 262898 - www/gitea: Update to 1.16.5 (fixes security vulnerabilities)
Summary: www/gitea: Update to 1.16.5 (fixes security vulnerabilities)
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Many People
Assignee: Florian Smeets
URL:
Keywords: needs-patch, needs-qa, security
Depends on:
Blocks: 261576
  Show dependency tree / graph
 
Reported: 2022-03-28 23:10 UTC by Dan Langille
Modified: 2022-03-29 23:14 UTC (History)
5 users (show)

See Also:
bugzilla: maintainer-feedback? (stb)
koobs: merge-quarterly?

Attachments
updates www/gitea to 1.16.5 (891 bytes, patch)
2022-03-28 23:10 UTC, Dan Langille 		no flags Details | Diff
vuxml entries for gitea 1.16.4 and 1.16.5 (2.24 KB, patch)
2022-03-29 03:15 UTC, fsbruva 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Dan Langille freebsd_committer freebsd_triage 2022-03-28 23:10:22 UTC 
Created attachment 232790 [details]
updates www/gitea to 1.16.5

This updates www/gita to 1.16.5 and fixes several security vulunerabilities.

re: https://github.com/go-gitea/gitea/releases/tag/v1.16.5
Comment 1 Kubilay Kocak freebsd_committer freebsd_triage 2022-03-29 01:28:57 UTC 
This also (apparently) fixes a regression after 1.16.4 update (see: bug 261576), which can be closed when this once this update is committed and merged.

Also pending vuxml entry for these security updates
Comment 2 fsbruva 2022-03-29 03:15:11 UTC 
Created attachment 232792 [details]
vuxml entries for gitea 1.16.4 and 1.16.5

Combined into single patch. Let me know if they should be separated.
Comment 4 commit-hook freebsd_committer freebsd_triage 2022-03-29 21:01:05 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=36060fbbb19c439751045bc139fc15cb4b02a231

commit 36060fbbb19c439751045bc139fc15cb4b02a231
Author:     fsbruva@yahoo.com <fsbruva@yahoo.com>
AuthorDate: 2022-03-29 20:39:43 +0000
Commit:     Florian Smeets <flo@FreeBSD.org>
CommitDate: 2022-03-29 20:59:57 +0000

    security/vuxml: Add www/gitea vulnerabilities

    PR:             262898

 security/vuxml/vuln-2022.xml | 61 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 61 insertions(+)
Comment 5 commit-hook freebsd_committer freebsd_triage 2022-03-29 21:12:09 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=b788272c6c2ff5b21dd6991f7f680e39e6041b12

commit b788272c6c2ff5b21dd6991f7f680e39e6041b12
Author:     Dan Langille <dvl@FreeBSD.org>
AuthorDate: 2022-03-29 21:06:34 +0000
Commit:     Florian Smeets <flo@FreeBSD.org>
CommitDate: 2022-03-29 21:11:35 +0000

    www/gitea: Update to 1.16.5

    - Fixes for runtime issues with go1.18
    - Fixes for security issues

    Changes: https://github.com/go-gitea/gitea/releases/tag/v1.16.5

    PR:             262898, 261576
    Reported by:    dvl, CTS - FreeBSD Team <de-freebsd@ctseuro.com>
    Approved by:    maintainer
    Security:       83466f76-aefe-11ec-b4b6-d05099c0c059

 www/gitea/Makefile | 2 +-
 www/gitea/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 6 commit-hook freebsd_committer freebsd_triage 2022-03-29 21:30:17 UTC 
A commit in branch 2022Q1 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=e3af7d020f102c934154db26094e1d94cac6891e

commit e3af7d020f102c934154db26094e1d94cac6891e
Author:     Dan Langille <dvl@FreeBSD.org>
AuthorDate: 2022-03-29 21:06:34 +0000
Commit:     Florian Smeets <flo@FreeBSD.org>
CommitDate: 2022-03-29 21:28:30 +0000

    www/gitea: Update to 1.16.5

    - Fixes for runtime issues with go1.18
    - Fixes for security issues

    Changes: https://github.com/go-gitea/gitea/releases/tag/v1.16.5

    PR:             262898, 261576
    Reported by:    dvl, CTS - FreeBSD Team <de-freebsd@ctseuro.com>
    Approved by:    maintainer
    Security:       83466f76-aefe-11ec-b4b6-d05099c0c059

    (cherry picked from commit b788272c6c2ff5b21dd6991f7f680e39e6041b12)

 www/gitea/Makefile | 2 +-
 www/gitea/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 7 Florian Smeets freebsd_committer freebsd_triage 2022-03-29 21:32:05 UTC 
Committed and merged to quarterly.
Comment 8 fsbruva 2022-03-29 23:14:49 UTC 
(In reply to Florian Smeets from comment #3)
Would you like me to submit another patch to update vuxml and include this list?