FreeBSD Bugzilla – Attachment 237361 Details for
Bug 267106
www/gitea: Update to 1.17.3 (fixes security vulnerabilities)
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
patch to update the port to 1.17.3 and add a vuxml entry
gitea-1.17.3.patch (text/plain), 2.14 KB, created by
Stefan Bethke
on 2022-10-15 20:49:20 UTC
(
hide
)
Description:
patch to update the port to 1.17.3 and add a vuxml entry
Filename:
MIME Type:
Creator:
Stefan Bethke
Created:
2022-10-15 20:49:20 UTC
Size:
2.14 KB
patch
obsolete
>diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml >index db9580ed6..17851b183 100644 >--- a/security/vuxml/vuln-2022.xml >+++ b/security/vuxml/vuln-2022.xml >@@ -1,3 +1,34 @@ >+ <vuln vid="d713d709-4cc9-11ed-a621-0800277bb8a8"> >+ <topic>gitea -- multiple issues</topic> >+ <affects> >+ <package> >+ <name>gitea</name> >+ <range><lt>1.17.3</lt></range> >+ </package> >+ </affects> >+ <description> >+ <body xmlns="http://www.w3.org/1999/xhtml"> >+ <p>The Gitea team reports:</p> >+ <blockquote cite="https://github.com/go-gitea/gitea/pull/21463"> >+ <p>Sanitize and Escape refs in git backend</p> >+ </blockquote> >+ <blockquote cite="https://github.com/go-gitea/gitea/pull/21412"> >+ <p>Bump golang.org/x/text</p> >+ </blockquote> >+ <blockquote cite="https://github.com/go-gitea/gitea/pull/21281"> >+ <p>Update bluemonday</p> >+ </blockquote> >+ </body> >+ </description> >+ <references> >+ <url>https://github.com/go-gitea/gitea/releases/tag/v1.17.3</url> >+ </references> >+ <dates> >+ <discovery>2022-09-27</discovery> >+ <entry>2022-10-15</entry> >+ </dates> >+ </vuln> >+ > <vuln vid="127674c6-4a27-11ed-9f93-002b67dfc673"> > <topic>roundcube-thunderbird_labels -- RCE with custom label titles</topic> > <affects> >diff --git a/www/gitea/Makefile b/www/gitea/Makefile >index 05cf7187b..c5b7d255a 100644 >--- a/www/gitea/Makefile >+++ b/www/gitea/Makefile >@@ -1,7 +1,6 @@ > PORTNAME= gitea > DISTVERSIONPREFIX= v >-DISTVERSION= 1.17.2 >-PORTREVISION= 1 >+DISTVERSION= 1.17.3 > CATEGORIES= www > MASTER_SITES= https://github.com/go-gitea/gitea/releases/download/${DISTVERSIONPREFIX}${DISTVERSION}/ \ > https://dl.gitea.io/gitea/${DISTVERSION}/ >diff --git a/www/gitea/distinfo b/www/gitea/distinfo >index 84536c54c..a9c391188 100644 >--- a/www/gitea/distinfo >+++ b/www/gitea/distinfo >@@ -1,3 +1,3 @@ >-TIMESTAMP = 1662886552 >-SHA256 (gitea-src-1.17.2.tar.gz) = a4383e1c2ddd6d67f4471a0bbc1b4839a15ab8fd6951804e1be43d7229e1de58 >-SIZE (gitea-src-1.17.2.tar.gz) = 52668293 >+TIMESTAMP = 1665865667 >+SHA256 (gitea-src-1.17.3.tar.gz) = 35490480ab793844e8ef9d541dca1c3c7ee510883205fe9197f373d276cd1f78 >+SIZE (gitea-src-1.17.3.tar.gz) = 52711597
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 267106
: 237361