diff --git a/security/vuxml/vuln-2021.xml b/security/vuxml/vuln-2021.xml index e4f4a9568..a680cef46 100644 --- a/security/vuxml/vuln-2021.xml +++ b/security/vuxml/vuln-2021.xml @@ -1,3 +1,36 @@ + + gitea -- multiple vulnerabilities + + + gitea + 1.15.0 + + + + +

The Gitea Team reports for release 1.15.0:

+
+
    +
  • Encrypt LDAP bind password in db with SECRET_KEY (#15547)
    • +
  • Remove random password in Dockerfiles (#15362)
    • +
  • Upgrade to the latest version of golang-jwt and increase minimum go to 1.15 (#16590) (#16606)
    • +
  • Correctly create of git-daemon-export-ok files (#16508) (#16514)
    • +
  • Don't show private user's repo in explore view (#16550) (#16554)
    • +
  • Update node tar dependency to 6.1.6 (#16622) (#16623)
    • +
+
+ + + + https://github.com/go-gitea/gitea/releases/tag/v1.15.0 + ports/257994 + + + 2021-04-29 + 2021-08-22 + + + gitea -- multiple vulnerabilities diff --git a/www/gitea/Makefile b/www/gitea/Makefile index d5c0103db..aa0f02a60 100644 --- a/www/gitea/Makefile +++ b/www/gitea/Makefile @@ -1,6 +1,6 @@ PORTNAME= gitea DISTVERSIONPREFIX= v -DISTVERSION= 1.14.6 +DISTVERSION= 1.15.0 CATEGORIES= www MASTER_SITES= https://github.com/go-gitea/gitea/releases/download/${DISTVERSIONPREFIX}${DISTVERSION}/ DISTNAME= gitea-src-${DISTVERSION} diff --git a/www/gitea/distinfo b/www/gitea/distinfo index 159f89866..e5db874f6 100644 --- a/www/gitea/distinfo +++ b/www/gitea/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1629474979 -SHA256 (gitea-src-1.14.6.tar.gz) = 208a0e26569f303e8a83c65d7b72dca0af7b3ca2e6a8e50c40dde798882a7b5a -SIZE (gitea-src-1.14.6.tar.gz) = 117871468 +TIMESTAMP = 1629616193 +SHA256 (gitea-src-1.15.0.tar.gz) = 5aee6bb55a10aa5ff45d692ccd83aa138409c4a518fc2b02a668e4681f84e877 +SIZE (gitea-src-1.15.0.tar.gz) = 48537339 diff --git a/www/gitea/pkg-message b/www/gitea/pkg-message index 9d56799d6..02fcda138 100644 --- a/www/gitea/pkg-message +++ b/www/gitea/pkg-message @@ -9,4 +9,12 @@ app.ini.sample), or allow Gitea to make the change for you by making the config file writable to the git user. EOM } +{ type: upgrade + maximum_version: 1.15.0 + message: <