Bug 269131

Summary: www/gitea: update to 1.18.3 (fixes security vulnerabilities)
Product: Ports & Packages Reporter: Stefan Bethke <stb>
Component: Individual Port(s)Assignee: Florian Smeets <flo>
Status: Closed FIXED    
Severity: Affects Many People CC: flo, grahamperrin, laszlo, ports-secteam
Priority: Normal Keywords: security
Version: LatestFlags: stb: maintainer-feedback+
stb: merge-quarterly?
Hardware: Any   
OS: Any   
URL: https://blog.gitea.io/2023/01/gitea-1.18.3-is-released/
Attachments:
Description Flags
Patch to update the port to 1.18.3 none

Description Stefan Bethke 2023-01-24 13:23:18 UTC 
Created attachment 239677 [details]
Patch to update the port to 1.18.3

Update gitea to 1.18.3

This release fixes one security issue and two bugs.

Release notes: https://blog.gitea.io/2023/01/gitea-1.18.3-is-released/
Comment 1 commit-hook freebsd_committer freebsd_triage 2023-01-24 20:40:57 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=8bcd25bfcad8f9c30f60fa9718bdd274813d3df6

commit 8bcd25bfcad8f9c30f60fa9718bdd274813d3df6
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2023-01-24 20:38:06 +0000
Commit:     Florian Smeets <flo@FreeBSD.org>
CommitDate: 2023-01-24 20:38:06 +0000

    www/gitea: Update to 1.18.3

    PR:             269131
    MFH:            2023Q1
    Security:       b8a0fea2-9be9-11ed-8acf-0800277bb8a8

 www/gitea/Makefile | 2 +-
 www/gitea/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 2 commit-hook freebsd_committer freebsd_triage 2023-01-24 20:40:58 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=211f63f4d50a58aae8797b5caa709308af2ae175

commit 211f63f4d50a58aae8797b5caa709308af2ae175
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2023-01-24 20:37:23 +0000
Commit:     Florian Smeets <flo@FreeBSD.org>
CommitDate: 2023-01-24 20:37:23 +0000

    security/vuxml: Record gitea vulnerability

    PR:             269131

 security/vuxml/vuln/2023.xml | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
Comment 3 commit-hook freebsd_committer freebsd_triage 2023-01-24 20:42:59 UTC 
A commit in branch 2023Q1 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=ecdfa2e590839f4187cecf7260ea4c10542440db

commit ecdfa2e590839f4187cecf7260ea4c10542440db
Author:     Stefan Bethke <stb@lassitu.de>
AuthorDate: 2023-01-24 20:38:06 +0000
Commit:     Florian Smeets <flo@FreeBSD.org>
CommitDate: 2023-01-24 20:41:35 +0000

    www/gitea: Update to 1.18.3

    PR:             269131
    MFH:            2023Q1
    Security:       b8a0fea2-9be9-11ed-8acf-0800277bb8a8
    (cherry picked from commit 8bcd25bfcad8f9c30f60fa9718bdd274813d3df6)

 www/gitea/Makefile | 2 +-
 www/gitea/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 4 Florian Smeets freebsd_committer freebsd_triage 2023-01-24 20:43:37 UTC 
Committed (with minor style changes to the vuxml entry). Thanks!