HomeFreeBSD

www/gitea: update 1.23.6 => 1.23.8 (fix security issues)

Description

www/gitea: update 1.23.6 => 1.23.8 (fix security issues)

Security:

  • Fixed a bug when uploading files via the LFS SSH command (affects 1.23)
  • Resolved CVE-2025-22873 in the Go os package, which previously allowed improper access to parent directories under certain conditions

Release notes:
https://blog.gitea.com/release-of-1.23.7/
https://blog.gitea.com/release-of-1.23.8/

Changelogs:
https://github.com/go-gitea/gitea/releases/tag/v1.23.7
https://github.com/go-gitea/gitea/releases/tag/v1.23.8

While here improve port:

  • remove go version after default go version was increased to 1.24
  • update WWW
  • align options

PR: 286828
Approved by: Stefan Bethke <stb@lassitu.de> (maintainer, implicit - fix security issues)
Security: CVE-2025-22873

Details

Provenance
portmaster_BSDforge.comAuthored on May 22 2025, 7:48 PM
vvdCommitted on May 22 2025, 8:00 PM
Parents
R11:8c3fc9128d8c: security/tailscale: Update to 1.84.0
Branches
Unknown
Tags
Unknown