CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

www/forgejo 16

Compact self-hosted Git forge

0
unaddressed
0
VuXML only
9
fixed
1
open problem reports

Port info

Maintainer
des@FreeBSD.org
Packages
latest: 16
Upstream
up to date
Last update
to 16 · 0dfbb738da
Quarterly
2026Q4: 16
WWW
https://forgejo.org/
Links
cgit · VuXML

Install

Package
# pkg install forgejo
installs 16 from latest; from quarterly (2026Q4) 16
Port
# cd /usr/ports/www/forgejo && make install clean
Size
1.2 KiB download · 243 B installed
Depends on
www/forgejo16 16.0.6_1
License
NA

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161616–
FreeBSD 151616–
FreeBSD 14161616

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151616–
FreeBSD 14161616

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 16.

Fixed (9)

Show 9 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
297013maintainer-feedback? www/forgejo: panic at startup, and I'm not sure that version 16 is actually supposed to work on FreeBSDNew2026-07-26

Commits (61)

Dag-Erling Smørgrav (des) · 16
www/forgejo16: New port

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/16.0.0.md
0dfbb738da
Dag-Erling Smørgrav (des) · 15
www/forgejo: Convert to metaport and bump to 15
4c26b0e016
Dag-Erling Smørgrav (des) · 14.0.5
www/foregjo: Update to 14.0.5

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/14.0.5.md

MFH:		2026Q2
ebe4b4ee79
Dag-Erling Smørgrav (des) · 14.0.4_2
www/forgejo: Fix non-BINDATA case

DATADIR is still needed for static assets in the non-BINDATA case.
Point StaticRootPath at it.  In the BINDATA case (which is the default),
the assets are linked into the binary and StaticRootPath is not used.

PR:		294619
Fixes:		3686ad021c23 ("www/forgejo: Correct AppWorkPAth")
MFH:		2026Q2
e75690e314
Dag-Erling Smørgrav (des) · 14.0.4_1
www/forgejo: Correct AppWorkPAth

We were incorrectly setting AppWorkPath to DATADIR and creating DATADIR
on installation.  Set it to DBDIR instead to match the app.ini and rc
script we generate.  This should be a nop for anyone with a working
configuration, and should allow forgejo-cli to work without explicitly
specifying the correct work directory.

PR:		294619
MFH:		2026Q2
3686ad021c
Dag-Erling Smørgrav (des) · 14.0.4
www/foregjo: Update to 14.0.4

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/14.0.4.md

MFH:		2026Q2
4a534eca00
Dag-Erling Smørgrav (des) · 14.0.3_2
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Dag-Erling Smørgrav (des) · 14.0.3_1
www/forgejo: Fix PAM authentication

Add an upstream patch which addresses an issue with PAM authentication.

MFH:		2026Q2
2b64940408
Dag-Erling Smørgrav (des) · 14.0.3
www/forgejo: Update to 14.0.3

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/14.0.3.md

MFH:		2026Q1
58e7c378a4
Adam Weinberger (adamw) · 14.0.2_3
various: Bump ports for Go 1.25.8
a8d318da7c
Dag-Erling Smørgrav (des) · 14.0.2_2
www/forgejo: Fix rc script order

PR:	293453
MFH:	2026Q1
6e68cfdd7b
Adam Weinberger (adamw) · 14.0.2_1
various: Bump Go ports for 1.25.7
5a5747a5a0
Dag-Erling Smørgrav (des) · 14.0.2
www/forgejo: Update to 14.0.2

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/14.0.2.md

MFH:		2026Q1
4358aecad4
Dag-Erling Smørgrav (des) · 14.0.1
www/forgejo: Update to 14.0.1

MFH:		2026Q1
17069d2f10
Dag-Erling Smørgrav (des) · 14.0.0
www/forgejo: Update to 14.0.0

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/14.0.0.md

MFH:		2026Q1
e17d963006
Adam Weinberger (adamw) · 13.0.4_1
various: Bump Go ports for 1.25.6
9f4bc8d0b7
Dag-Erling Smørgrav (des) · 13.0.4
www/forgejo: Update to 13.0.4

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/13.0.4.md

MFH:            2026Q1
942fa74e13
Dag-Erling Smørgrav (des) · 13.0.3_1
www/forgejo{,-lts}: Update license

MFH:		2025Q4
a7ae0233f6
Dag-Erling Smørgrav (des) · 13.0.3
many: Unpin Go ports

* Ports that were pinned to a deprecated version of Go (1.23 or older)
  have been unpinned.

* Ports that were pinned to a still-supported version of Go (1.24 or
  newer) have been converted to requesting that as their minimum Go
  version.

* Ports that had been forcibly deprecated for pinning an expired Go
  version have been undeprecated.
75d873b56a
Dag-Erling Smørgrav (des) · 13.0.3
www/forgejo: Update to 13.0.3

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/13.0.3.md

MFH:		2025Q4
2d879b8389
Adam Weinberger (adamw) · 13.0.2_2
various: Bump Go ports for 1.25.5
ec872485e4
Adam Weinberger (adamw) · 13.0.2_1
various: Bump Go ports for 1.25.4
d761fa722b
Dag-Erling Smørgrav (des) · 13.0.2
www/forgejo: Update to 13.0.2

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/13.0.2.md

Additional changes:
* Stop setting FORGEJO_WORK_DIR environment variable.  It is already
  hardcoded into the binary, and can be overridden in the configuration
  file if needed.
* Improve the prestart check.

PR:		287010
PR:		289846
MFH:		2025Q4
Reviewed by:	bapt
Differential Revision:	https://reviews.freebsd.org/D53394
ee8bf6e236
Dag-Erling Smørgrav (des) · 13.0.1
www/forgejo: Update to 13.0.1 and assume maintainership

Changelog:
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/13.0.0.md
* https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/13.0.1.md

Reviewed by:	arrowd, bapt
Differential Revision:	https://reviews.freebsd.org/D53297
f0fec20072
Adam Weinberger (adamw) · 12.0.4_2
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 12.0.4_1
many: Bump dependent ports after go124 update
2e7587aaf8
Hiroki Tagato (tagattie) · 12.0.4
www/forgejo: update to 12.0.4

Release Announcement: https://www.forgejo.org/2025-07-release-v12-0/
Changelog:
- https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/12.0.0.md
- https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/12.0.1.md
- https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/12.0.2.md
- https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/12.0.3.md
- https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/12.0.4.md

PR:		289622
Reported by:	Paul Armstrong <freebsd@otoh.org>
Tested by:	Lapo Luchini <lapo@lapo.it>
Approved by:	Stefan Bethke <stb@lassitu.de> (maintainer timeout, 3 weeks)
c382aead6b
Adam Weinberger (adamw) · 11.0.3_1
many: Bump go ports for go-1.24.7
31a5a229a7
Älven (alven) · 11.0.3
www/forgejo: Update 11.0.2 => 11.0.3

Changelog:
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/11.0.3.md

+ Mark as PIE_UNSAFE
* Format with portfmt(1)

PR:		288671

Reported by:	Rudolph <rudolphfroger@dreamsolution.nl>
Tested by:	Rudolph <rudolphfroger@dreamsolution.nl>
Approved by:	Stefan Bethke <stb@lassitu.de>
	 	(maintainer, timeout > 2 weeks)
Approved by:	yuri@ (Mentor)
91746e8747
Adam Weinberger (adamw) · 11.0.2_2
go ports: Bump for 1.24.6
53610681ea
Adam Weinberger (adamw) · 11.0.2_1
many: Bump PORTREVISION for go-1.24.5 update
275975297b
Vladimir Druzenko (vvd) · 11.0.2
www/forgejo: Update 11.0.1 => 11.0.2

Release notes:
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/11.0.2.md

Also "fast-fix" rc script:
  Command error: stat /usr/local/sbin/custom/conf/app.ini: no such file or directory
  cannot start forgejo because of configuration errors. Run
      su -m git -c 'forgejo doctor check'
  for further details

PR:	287010
25356383b9
Adam Weinberger (adamw) · 11.0.1_1
various: Bump PORTREVISION after go124-1.24.4 update
94be418de3
Vladimir Druzenko (vvd) · 11.0.1
www/forgejo: Update 10.0.3 => 11.0.1 (fix security issues)

News:
https://forgejo.org/2025-04-release-v11-0/
https://forgejo.org/2025-04-monthly-update/#security-releases-v1101-and-v7015

Relsease notes:
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/11.0.0.md
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/11.0.1.md

While here remove go version after default go version was increased to 1.24.

PR:		286296
Approved by:	Stefan Bethke <stb@lassitu.de> (maintainer, timeout 1 month)
MFH:		2025Q2
d254830057
Adam Weinberger (adamw) · 10.0.3_1
go: Bump ports for go124 update
a4e30d4f4f
Vladimir Druzenko (vvd) · 10.0.3
www/forgejo: Update 10.0.1 => 10.0.3

Changelogs:
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/10.0.2.md
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/10.0.3.md

PR:		285621
Approved by:	Stefan Bethke <stb@lassitu.de> (maintainer)
1fbef2e67c
Adam Weinberger (adamw) · 10.0.1_2
Bump all go ports for yesterday's releases
d0642a6176
Ashish SHUKLA (ashish) · 10.0.1_1
all: Bump after lang/go123 update

PR:		284681
f9fbe03c69
Vladimir Druzenko (vvd) · 10.0.1
www/forgejo: Update 10.0.0 → 10.0.1 (fixes security vulnerabilities)

News:
https://forgejo.org/2025-02-release-v10-0-1/

Changelog:
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/10.0.1.md

PR:	284676
MFH:	2025Q1
df8bf23d2a
Vladimir Druzenko (vvd) · 10.0.0
www/forgejo: Update 9.0.3 → 10.0.0 (fixes security vulnerabilities)

Announcement:
https://forgejo.org/2025-01-release-v10-0/
Release Notes:
https://codeberg.org/forgejo/forgejo/milestone/8377

PR:	284359
MFH:	2025Q1
fdae03c55d
Ashish SHUKLA (ashish) · 9.0.3_1
all: Bump after lang/go123 update

MFH:		2025Q1
ca07a602a8
Vladimir Druzenko (vvd) · 9.0.3
www/forgejo: Update 9.0.1 → 9.0.3 (fixes security vulnerabilities)

Release notes:
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/9.0.2.md
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/9.0.3.md

PR:	283388
MFH:	2024Q4
cb922a9818
Vladimir Druzenko (vvd) · 9.0.1_1
www/forgejo: Switch to using "FORGEJO_" prefixed environment variables

Switch the environment variables specified in the Forgejo RC file from
"GITEA_" to "FORGEJO_".
The old variables are still work, but new are preffered:
https://codeberg.org/forgejo/forgejo/src/commit/7015bdfa480e717299377b4547320ae6d70e9da2/modules/setting/path.go#L123
Also, the Forgejo documentation uses new names:
https://forgejo.org/docs/latest/admin/config-cheat-sheet/

PR:		282771
Approved by:	Stefan Bethke <stb@lassitu.de> (maintainer)
2aa09e577e
Ashish SHUKLA (ashish) · 9.0.1_1
all: Bump after lang/go123 update
9ac7419a49
Vladimir Druzenko (vvd) · 9.0.1
www/forgejo: Update 9.0.0 → 9.0.1 (fixes security vulnerabilities)

Changelog:
https://codeberg.org/forgejo/forgejo/milestone/8544

PR:	282387
MFH:	2024Q4
b56cd15e5b
Joel Bodenmann (jbo) · 9.0.0
www/forgejo: Update to 9.0.0

Changelog: https://codeberg.org/forgejo/forgejo/milestone/7235

PR:	282153
c88a65a9a7
Vladimir Druzenko (vvd) · 8.0.3
www/forgejo: Update 8.0.2 → 8.0.3 (fixes security vulnerability)

Changelog:
  Security
    - PR (backported): replace v-html with v-text in branch search
      inputbox for XSS protection
    - PR: Upgrade webpack to v5.94.0 as a precaution to mitigate
      CVE-2024-43788, although we were not yet able to confirm that
      this can be exploited in Forgejo.
https://codeberg.org/forgejo/forgejo/milestone/8231

PR:	281314
MFH:	2024Q3
891df28121
Vladimir Druzenko (vvd) · 8.0.2
www/forgejo7: Update 7.0.4 → 7.0.8

Branch 7.0.x is a kind of LTS - supported until July of 2025:
https://forgejo.org/2024-07-release-v8-0/#release-schedule-and-long-term-support

Changelogs:
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#7-0-5
https://codeberg.org/forgejo/forgejo/src/branch/forgejo/RELEASE-NOTES.md#7-0-6
https://codeberg.org/forgejo/forgejo/milestone/7683
https://codeberg.org/forgejo/forgejo/milestone/7729

 - Take maintainership.
 - Add CONFLICTS_INSTALL with www/forgejo.

PR:	280532
2aef28e7e6
Vladimir Druzenko (vvd) · 8.0.2
www/forgejo: Update 8.0.1 → 8.0.2 (fixes security vulnerability)

Changelog:
https://codeberg.org/forgejo/forgejo/milestone/7728

PR:	281133
MFH:	2024Q3
5737efc12f
Vladimir Druzenko (vvd) · 8.0.1
www/forgejo: update 8.0.0 → 8.0.1, fix security issue

Release notes:
We strongly recommend that all Forgejo installations are upgraded to
the latest version as soon as possible.
https://forgejo.org/2024-08-release-v801/#recommended-action

PR:	281056
ba954124e5
page 1 of 2older →oldest »