CVE and update status of the FreeBSD ports tree3,298 unaddressed CVEs in 671 portsAll times are CET
Port details

www/gitea 28.2.0

Compact self-hosted Git service

Port info

Maintainer
ports@foss-daily.org
Packages
latest: 28.2.0
Upstream
up to date
Last update
to 28.2.0 · 20e15280c7
Quarterly
not in the 2026Q4 packages
WWW
https://gitea.com/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gitea
installs 28.2.0 from latest
Port
# cd /usr/ports/www/gitea && make install clean
# make -C /usr/ports/www/gitea config  # change options first
Size
34 MiB download · 138 MiB installed
Depends on
devel/git 2.56.0, devel/git-lfs 3.6.1_24
License
MIT
Creates
user git, group git
Options
3 of 4 on in the package: GIT_LFS PAM SQLITE
Show the 1 options that are off
BINDATA
pkg-message
Shown after upgrading
Please make sure to empty or maintain the contents of the
/usr/local/share/gitea folder between your upgrades of gitea.
Changes between versions can break the web UI due to residual
files from earlier versions.

1.21.0 has a breaking change regarding the public assets folder. In case
you use a proxying webserver serving the files, you need to update your
configuration:

https://github.com/go-gitea/gitea/pull/25907
Shown after upgrading
When upgrading from Gitea 1.7 or earlier, Gitea requires the addition of
another secret to the config file in order to start up.  Either manually add
JWT_SECRET to the /usr/local/etc/gitea/conf/app.ini config file (see
app.ini.sample), or allow Gitea to make the change for you by making the
config file writable to the git user.
Shown after upgrading
Some config file options have been changed in Gitea 1.15. Please refer to
the documentation at https://docs.gitea.io/en-us/customizing-gitea/ and
the release notes.
Shown after upgrading
We remind users that a bug was discovered with gitea dump in 1.14.3-1.14.6
and 1.15.0.  Database dumps from these versions cause broken fields in the
repo_unit and login_source tables causing the issue identified in #16961.
Users on 1.14.x must upgrade to 1.14.7 before running gitea dump.  See the
release notes for more information.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1628.2.0✗–
FreeBSD 1528.2.01.27.3_1–
FreeBSD 1428.2.01.27.3_128.2.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 15✗1.27.3_1–
FreeBSD 14✗1.27.3_1✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 28.2.0.

Fixed (63)

Show 63 fixed
VuXML entries whose affected range the packaged version has left.

CVE-2026-23603, CVE-2026-42931, CVE-2026-50105, CVE-2026-54481, CVE-2026-55982, CVE-2026-55984, CVE-2026-55986, CVE-2026-55987, CVE-2026-56443, CVE-2026-56654, CVE-2026-56657, CVE-2026-56750, CVE-2026-56755, CVE-2026-57886, CVE-2026-57894, CVE-2026-57897, CVE-2026-58314, CVE-2026-58416, CVE-2026-58417, CVE-2026-58420, CVE-2026-58425, CVE-2026-58427, CVE-2026-58428, CVE-2026-58429, CVE-2026-58431, CVE-2026-58432, CVE-2026-58433, CVE-2026-58434, CVE-2026-58435, CVE-2026-58436, CVE-2026-58437, CVE-2026-58438, CVE-2026-58439, CVE-2026-58440, CVE-2026-58441, CVE-2026-58442, CVE-2026-58443, CVE-2026-58444, CVE-2026-58445, CVE-2026-58507, CVE-2026-58508, CVE-2026-58510, CVE-2026-58511, CVE-2026-59763, CVE-2026-59765

Problem reports (3) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
297640maintainer-feedback? www/gitea 1.27.2 complains bash not found on startupNew2026-08-20
294089maintainer-feedback? www/gitea: service gitea restart fails, leaves gitea stoppedNew2026-08-18
296739maintainer-feedback? www/gitea: startup on boot failsNew2026-07-14

Commits (210)

Vanilla I. Shu (vanilla) · 1.10.1
Update to 1.10.1.

PR:		242490
Submitted by:	maintainer
f34a7b122b
Kai Knoblich (kai) · 1.10.0
www/gitea: Update to 1.10.0

* Pet portlint by removing empty line at the beginning while I'm here.

Changelog:

https://blog.gitea.io/2019/11/gitea-1.10.0-is-released/

PR:		241981
Submitted by:	Marius Halden <marius.halden@modirum.com>
Reported by:	Nils Johannsen <nilsjohannsen@gmx.de>
Approved by:	stb@lassitu.de (maintainer)
MFH:		2019Q4
Security:	b12a341a-0932-11ea-bf09-080027e0baa0
2777987291
Dmitri Goutnik (dmgk) · 1.9.5
www/gitea: Update to 1.9.5

Changes:	https://blog.gitea.io/2019/10/gitea-1.9.5-is-released/

PR:		241599
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	tz (mentor, implicit)
MFH:		2019Q4
Security:	fd10aa77-fb5e-11e9-af7b-0800274e5f20
bacd26e9d4
Dmitri Goutnik (dmgk) · 1.9.4
www/gitea: Update to 1.9.4

Changes:	https://blog.gitea.io/2019/10/gitea-1.9.4-is-released/

PR:		241209
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	araujo (mentor)
Differential Revision:	https://reviews.freebsd.org/D21991
59441e71b2
Dmitri Goutnik (dmgk) · 1.9.3_1
Go ports: cleanup, finish transition to USES=go started with r505321 (cat. sysutils-x11)

- Remove custom build/install targets left in place after r505321
- Switch to the new GO_TARGET tuple syntax introduced in r512001

Reviewed by:	tobik
Approved by:	araujo (mentor), portmgr (adamw)
Differential Revision:	https://reviews.freebsd.org/D21744
fc95b3f0cf
Dmitri Goutnik (dmgk) · 1.9.3_1
www/gitea: Use linker flags to set version instead of patching the source.

PR:		240744
Submitted by:	stb@lassitu.de (maintainer)
Reported by:	Ivan <bsd@abinet.ru>
Approved by:	araujo (mentor)
Differential Revision:	https://reviews.freebsd.org/D21771
20844bfa4e
Steve Wills (swills) · 1.9.3
www/gitea: Update to 1.9.3

PR:		240479
Submitted by:	stb@lassitu.de (maintainer)
0138908148
Yuri Victorovich (yuri) · 1.9.2
www/gitea: Switch to USES=go:modules, fix build with go1.13

PR:		240072
Submitted by:	Dmitri Goutnik <dg@syrec.org>
Approved by:	portmgr (fix build)
7c5f9a3bbe
Kai Knoblich (kai) · 1.9.2
www/gitea: Update to 1.9.2

Changelog:

https://blog.gitea.io/2019/08/gitea-1.9.2-is-released/

PR:		240046
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2019Q3
Security:	e7392840-c520-11e9-a4ef-0800274e5f20
04414bcc11
Kurt Jaeger (pi) · 1.9.1
www/gitea: upgrade 1.9.0 -> 1.9.1

- This release contains two security fixes, so we highly recommend updating.

PR:		239930
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2019Q3
Relnotes:	https://blog.gitea.io/2019/08/gitea-1.9.1-is-released/
Security:	https://github.com/go-gitea/gitea/pull/7715
		https://github.com/go-gitea/gitea/pull/7762
c130004b70
Mathieu Arnold (mat) · 1.9.0
Convert to UCL & cleanup pkg-message (categories w)
a400cfc5f4
Kai Knoblich (kai) · 1.9.0
www/gitea: Update to 1.9.0

Changelog:

https://blog.gitea.io/2019/07/gitea-1.9.0-is-released/

PR:		239562
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2019Q3
Security:	e7b69694-b3b5-11e9-9bb6-0800274e5f20
d7e4b71ae1
Kai Knoblich (kai) · 1.8.3
www/gitea: Update to 1.8.3

* Pet portclippy while I'm here.

Changelog:

https://github.com/go-gitea/gitea/releases/tag/v1.8.3

PR:		238738
Submitted by:	stb@lassitu.de (maintainer)
5428268343
Kai Knoblich (kai) · 1.8.2
www/gitea: Update to 1.8.2

Changelog:

* Fix possbile mysql invalid connnection error
* Handle invalid administrator username on install page
* Disable arm7 builds
* Fix default for allowing new organization creation for new users
* SearchRepositoryByName improvements and unification
* Fix u2f registrationlist ToRegistrations() method
* Allow collaborators to view repo owned by private org
* Use AppURL for Oauth user link
* Escape the commit message on issues update
* Fix regression for API users search
* Handle early git version's lack of get-url
* Fix wrong init dependency on markup extensions

https://github.com/go-gitea/gitea/releases/tag/v1.8.2

PR:		238239
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2019Q2
63c1b6a7d4
Jochen Neumeister (joneum) · 1.8.1
Update to 1.8.1

Changelog: https://blog.gitea.io/2019/05/gitea-1.8.1-is-released/

PR:		237812
Submitted by:	stb@lassitu.de (maintainer)
Sponsored by:	Netzkommune GmbH
28206e8036
Tobias Kortkamp (tobik) · 1.8.0
www/gitea: Also clean up distinfo
5fe4c2bf20
Tobias Kortkamp (tobik) · 1.8.0
www/gitea: Do not set DISTVERSION twice
e1f7d7154a
Jochen Neumeister (joneum) · 1.8.0
www/gitea: Update to 1.8.0

Changelog: https://blog.gitea.io/2019/04/gitea-1.8.0-is-released/

 - Add UPDATING

PR:		237734
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2019Q2
Security:	a1de4ae9-6fda-11e9-9ba0-4c72b94353b5
Sponsored by:	Netzkommune GmbH
c508c53374
Jochen Neumeister (joneum) · 1.7.6
Update to 1.7.6

Changelog: https://blog.gitea.io/2019/04/gitea-1.7.6-is-released/

PR:		237303
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2019Q2
Security:	b747783f-5fb6-11e9-b2ac-08002705f877
Sponsored by:	Netzkommune Gmbh
deb458cc0e
Rodrigo Osorio (rodrigo) · 1.7.5
Upgrade www/gitea from 1.7.4 to 1.7.5

Changelog: https://github.com/go-gitea/gitea/releases/tag/v1.7.5
 BUGFIXES:
  - Fix unitTypeCode not being used in accessLevelUnit
  - Fix bug where manifest.json was being requested without cookies
    and continuously creating new sessions
  - Fix ParsePatch function to work with quoted diff --git strings

PR:		236837
Submitted by:	stb@lassitu.de (maintainer)
d50f55c2c5
Jochen Neumeister (joneum) · 1.7.4
Update to 1.7.3

Changelog: https://blog.gitea.io/2019/03/gitea-1.7.4-is-released/

PR:		236563
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2019Q1
Security:	8ba7358-4b02-11e9-9ba0-4c72b94353b5
Sponsored by:	Netzkommune GmbH
dbca475b23
Jochen Neumeister (joneum) · 1.7.3
Update to 1.7.3

Changelog: https://github.com/go-gitea/gitea/releases/tag/v1.7.3

PR:		236122
Submitted by:	stb@lassitu.de (maintainer)
Sponsored by:	Netzkommune GmbH
b9da2b5f8e
Jochen Neumeister (joneum) · 1.7.2
Update to 1.7.2

Changelog: https://github.com/go-gitea/gitea/releases/tag/v1.7.2

PR:		235760
Submitted by:	stb@lassitu.de (maintainer)
Sponsored by:	Netzkommune GmbH
1edf6b9c26
Joseph Mingrone (jrm) · 1.7.1
www/gitea: Update to 1.7.1

This release fixes three security vulnerabilities and ten bugs.
Release Notes: https://blog.gitea.io/2019/02/release-of-1.7.1/

PR:		235399
Submitted by:	stb@lassitu.de (maintainer)
a0172f6c1d
Jochen Neumeister (joneum) · 1.7.0
www/gitea: Update to 1.7.0 [1]

Add sqlite_unlock_notify tag [2]

PR:		235140 [1], 234709 [2]
Submitted by:	stb@lassitu.de (maintainer) [1]
Reported by:	adamw [2]
Approved by:	maintainer [2]
MFH:		2019Q1
Security:	7f6146aa-2157-11e9-9ba0-4c72b94353b5
Sponsored by:	Netzkommune Gmbh
c20cced1b3
Steve Wills (swills) · 1.6.4
www/gitea: update to 1.6.4

PR:		235035
Submitted by:	stb@lassitu.de (maintainer)
353bccad23
Steve Wills (swills) · 1.6.3
www/gitea: Update to 1.6.3

PR:		234659
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2019Q1
Security:	63e36475-119f-11e9-aba7-080027fee39c
bbbf1eec3b
Steve Wills (swills) · 1.6.2
www/gitea: Update to 1.6.2

PR:		234255
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2018Q4
Security:	29d34524-0542-11e9-a444-080027fee39c
32e458af01
Steve Wills (swills) · 1.6.1
www/gitea: update to 1.6.1

PR:		233897
Submitted by:	stb@lassitu.de (maintainer)
f59c1ffb9b
Bernhard Froehlich (decke) · 1.6.0
Update to 1.6.0

Changelog: https://blog.gitea.io/2018/11/gitea-1.6.0-is-released/

PR:		233475
MFH:		2018Q4
fd9e6de06b
Rene Ladan (rene) · 1.5.3
Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724
8a502cb2d4
Florian Smeets (flo) · 1.5.3
Update to 1.5.3

PR:		232897
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2018Q4
Security:	deb4f633-de1d-11e8-a9fb-080027f43a02
2910840cf6
Jochen Neumeister (joneum) · 1.5.2
Update to 1.5.2

changelog: https://blog.gitea.io/2018/10/gitea-1.5.2-is-released/

PR:		232123
Reported by:	maintainer
MFH:		2018Q4
Security:	cb539d4e-cd68-11e8-8819-00e04c1ea73d
Sponsored by:	Netzkommune GmbH
b7ab7f09cb
Florian Smeets (flo) · 1.5.1
Update to 1.5.1

PR:		231180
Submitted by:	stb@lassitu.de (maintainer)
Security:	7c750960-b129-11e8-9fcd-080027f43a02
d008419640
Florian Smeets (flo) · 1.5.0
Update to 1.5.0

PR:		230512
Submitted by:	stb@lassitu.de (maintainer)
Security:	bcf56a42-9df8-11e8-afb0-589cfc0f81b0
c2268afcfc
Vanilla I. Shu (vanilla) · 1.4.3
Update Gitea to 1.4.3

Release notes: https://blog.gitea.io/2018/06/release-of-1.4.3/

PR:		229379
Submitted by:	maintainer
81c5e4fd94
Florian Smeets (flo) · 1.4.2
- update to 1.4.2 [1] - correct the daemon(8) invocation to supply the correct syslog process name [2]

PR:		228860 [1], 228784 [2]
Submitted by:	stb@lassitu.de (maintainer) [1], feld [2]
Approved by:	maintainer [2]
6bbf8562e3
Kirill Ponomarev (krion) · 1.4.1
Update to version 1.4.1

* remove superfluous bash dependency in favor /bin/sh

PR:		227976 [1], 227028 [2]
Submitted by:	maintainer [1], Ivan <bsd@abinet.ru> [2]
Approved by:	maintainer [2]
06031efe95
Yuri Victorovich (yuri) · 1.4.0
www/gitea: Update 1.3.3 -> 1.4.0

Port changes:
* Silence non-install commands
* Remove unnecessary mkdir
* Change WWW to their official homepage
* Add to description from the homepage

PR:		226941
Submitted by:	stb@lassitu.de (maintainer)
6014192a04
Tobias Kortkamp (tobik) · 1.3.3
www/gitea: Update to 1.3.3

PR:		226342
Approved by:	stb@lassitu.de (maintainer)
Changes:	https://blog.gitea.io/2017/12/release-of-1.3.2/
Changes:	https://blog.gitea.io/2018/02/release-of-1.3.3/
MFH:		2018Q1
59a1554cb6
Tobias Kortkamp (tobik) · 1.3.1
www/gitea: Update to 1.3.1

Changes:	https://blog.gitea.io/2017/12/release-of-1.3.1/
PR:		224213
Submitted by:	stb@lassitu.de (maintainer)
c8a9cf544e
Tobias Kortkamp (tobik) · 1.3.0_1
www/gitea: Fix pkg-plist after ports r455663

PR:		224159
Submitted by:	stb@lassitu.de (maintainer)
Pointy hat to:	joneum
bb1a717800
Jochen Neumeister (joneum) · 1.3.0
www/gitea: Update from 1.2.3 to 1.3.0

Changelog: https://blog.gitea.io/2017/11/release-of-1.3.0/

PR:		224127
Reported by:	joneum
Approved by:	mentors (implicit), stb@lassitu.de (maintainer)
378e6279fe
Jochen Neumeister (joneum) · 1.2.3
www/gitea: Update from 1.2.2 to 1.2.3

Changelog: https://blog.gitea.io/2017/11/release-of-1.2.3/

 *While here switch to DISTVERSION

PR:		223421
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D12953
59b1587bbd
Tobias Kortkamp (tobik) · 1.2.2_1
www/gitea: Fix rc script on FreeBSD 10.x/11.0

On FreeBSD 10.x/11.0 daemon(8) doesn't have -s,-l,-t, so starting
gitea would fail.  We partially revert the change from r453018 and use
the old behavior on these versions and don't log stdout/stderr to
syslog.

PR:		223283
Approved by:	stb@lassitu.de (maintainer)
f6cf79b8f9
Tobias Kortkamp (tobik) · 1.2.2
www/gitea: Update to 1.2.2

Also start gitea with its stdout and stderr logged to syslog
(daemon/debug by default) to aid in configuration debugging.

Changes:	https://blog.gitea.io/2017/10/release-of-1.2.2/
PR:		223283
Submitted by:	stb@lassitu.de (maintainer)
4b23d5f691
Luca Pizzamiglio (pizzamig) · 1.2.1
www/gitea: Update to 1.2.1

Release notes: https://blog.gitea.io/2017/10/release-of-1.2.1/

PR:		223067
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	olivier (mentor)
Differential Revision:	https://reviews.freebsd.org/D12721
36df67442b
Wen Heping (wen) · 1.2.0
- Update to 1.2.0

PR:		223001
Submitted by:	stb@lassitu.de(maintainer)
48ace99b6e
Thomas Zander (riggs) · 1.1.4_1
Fix version number in resulting binary

Details:
Gitea releases don't supply the release version number;
the automatic method to obtain the version number in
the Gitea build system only works when sources are checked
out from git.

PR:		222885
Submitted by:	stb@lassitu.de (maintainer)
MFH:		2017Q4
8015e5ad44
Jochen Neumeister (joneum) · 1.1.4
- www/gitea: Update from 1.1.3 to 1.1.4 - Changelog:   * Fix rendering of external links   * Fix deleted milestone bug   * Fix 500 error when view an issue which's milestone deleted   * Fix SHA1 hash linking

PR:		222076
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	tz (mentor)
Differential Revision:	https://reviews.freebsd.org/D12245
cf6bec5436