3 of 4 on in the package: GIT_LFSPAMSQLITEShow the 1 options that are off
BINDATA
pkg-message
Shown after upgrading
Please make sure to empty or maintain the contents of the
/usr/local/share/gitea folder between your upgrades of gitea.
Changes between versions can break the web UI due to residual
files from earlier versions.
1.21.0 has a breaking change regarding the public assets folder. In case
you use a proxying webserver serving the files, you need to update your
configuration:
https://github.com/go-gitea/gitea/pull/25907
Shown after upgrading
When upgrading from Gitea 1.7 or earlier, Gitea requires the addition of
another secret to the config file in order to start up. Either manually add
JWT_SECRET to the /usr/local/etc/gitea/conf/app.ini config file (see
app.ini.sample), or allow Gitea to make the change for you by making the
config file writable to the git user.
Shown after upgrading
Some config file options have been changed in Gitea 1.15. Please refer to
the documentation at https://docs.gitea.io/en-us/customizing-gitea/ and
the release notes.
Shown after upgrading
We remind users that a bug was discovered with gitea dump in 1.14.3-1.14.6
and 1.15.0. Database dumps from these versions cause broken fields in the
repo_unit and login_source tables causing the issue identified in #16961.
Users on 1.14.x must upgrade to 1.14.7 before running gitea dump. See the
release notes for more information.
Packages by version and architecture
latest
FreeBSD version
amd64
aarch64
i386
FreeBSD 16
28.2.0
✗
–
FreeBSD 15
28.2.0
1.27.3_1
–
FreeBSD 14
28.2.0
1.27.3_1
28.2.0
quarterly (2026Q4)
FreeBSD version
amd64
aarch64
i386
FreeBSD 15
✗
1.27.3_1
–
FreeBSD 14
✗
1.27.3_1
✗
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by pkg audit for the packaged version 28.2.0.
Fixed (63)
Show 63 fixed
VuXML entries whose affected range the packaged version has left.
www/gitea: update 1.23.6 => 1.23.8 (fix security issues)
Security:
- Fixed a bug when uploading files via the LFS SSH command
(affects 1.23)
- Resolved CVE-2025-22873 in the Go os package, which previously
allowed improper access to parent directories under certain conditions
Release notes:
https://blog.gitea.com/release-of-1.23.7/
https://blog.gitea.com/release-of-1.23.8/
Changelogs:
https://github.com/go-gitea/gitea/releases/tag/v1.23.7
https://github.com/go-gitea/gitea/releases/tag/v1.23.8
While here improve port:
- remove go version after default go version was increased to 1.24
- update WWW
- align options
PR: 286828
Approved by: Stefan Bethke <stb@lassitu.de> (maintainer, implicit - fix security issues)
Security: CVE-2025-22873
www/gitea: Update 1.23.5 => 1.23.6 (CVE-2025-30204, CVE-2025-29923, CVE-2025-22870)
This release also addresses the following security vulnerabilities:
- CVE-2025-30204 in jwt and CVE-2025-29923 in go-redis – thanks to
@TheFox0x7 for the fix.
- CVE-2025-22870 in golang.org/x/crypto and golang.org/x/net – fixed
for security hardening. Thanks again to @wxiaoguang for the
contribution.
Changelog:
https://blog.gitea.com/release-of-1.23.6/
PR: 285727
Approved by: Stefan Bethke <stb@lassitu.de> (maintainer)
MFH: 2025Q1