CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

www/gitea 28.2.0

Compact self-hosted Git service

Port info

Maintainer
ports@foss-daily.org
Packages
latest: 28.2.0
Upstream
up to date
Last update
to 28.2.0 · 20e15280c7
Quarterly
not in the 2026Q4 packages
WWW
https://gitea.com/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install gitea
installs 28.2.0 from latest
Port
# cd /usr/ports/www/gitea && make install clean
# make -C /usr/ports/www/gitea config  # change options first
Size
34 MiB download · 138 MiB installed
Depends on
devel/git 2.56.0, devel/git-lfs 3.6.1_24
License
MIT
Creates
user git, group git
Options
3 of 4 on in the package: GIT_LFS PAM SQLITE
Show the 1 options that are off
BINDATA
pkg-message
Shown after upgrading
Please make sure to empty or maintain the contents of the
/usr/local/share/gitea folder between your upgrades of gitea.
Changes between versions can break the web UI due to residual
files from earlier versions.

1.21.0 has a breaking change regarding the public assets folder. In case
you use a proxying webserver serving the files, you need to update your
configuration:

https://github.com/go-gitea/gitea/pull/25907
Shown after upgrading
When upgrading from Gitea 1.7 or earlier, Gitea requires the addition of
another secret to the config file in order to start up.  Either manually add
JWT_SECRET to the /usr/local/etc/gitea/conf/app.ini config file (see
app.ini.sample), or allow Gitea to make the change for you by making the
config file writable to the git user.
Shown after upgrading
Some config file options have been changed in Gitea 1.15. Please refer to
the documentation at https://docs.gitea.io/en-us/customizing-gitea/ and
the release notes.
Shown after upgrading
We remind users that a bug was discovered with gitea dump in 1.14.3-1.14.6
and 1.15.0.  Database dumps from these versions cause broken fields in the
repo_unit and login_source tables causing the issue identified in #16961.
Users on 1.14.x must upgrade to 1.14.7 before running gitea dump.  See the
release notes for more information.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 1628.2.0✗–
FreeBSD 1528.2.01.27.3_1–
FreeBSD 1428.2.01.27.3_128.2.0

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 15✗1.27.3_1–
FreeBSD 14✗1.27.3_1✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 28.2.0.

Fixed (63)

Show 63 fixed
VuXML entries whose affected range the packaged version has left.

CVE-2026-23603, CVE-2026-42931, CVE-2026-50105, CVE-2026-54481, CVE-2026-55982, CVE-2026-55984, CVE-2026-55986, CVE-2026-55987, CVE-2026-56443, CVE-2026-56654, CVE-2026-56657, CVE-2026-56750, CVE-2026-56755, CVE-2026-57886, CVE-2026-57894, CVE-2026-57897, CVE-2026-58314, CVE-2026-58416, CVE-2026-58417, CVE-2026-58420, CVE-2026-58425, CVE-2026-58427, CVE-2026-58428, CVE-2026-58429, CVE-2026-58431, CVE-2026-58432, CVE-2026-58433, CVE-2026-58434, CVE-2026-58435, CVE-2026-58436, CVE-2026-58437, CVE-2026-58438, CVE-2026-58439, CVE-2026-58440, CVE-2026-58441, CVE-2026-58442, CVE-2026-58443, CVE-2026-58444, CVE-2026-58445, CVE-2026-58507, CVE-2026-58508, CVE-2026-58510, CVE-2026-58511, CVE-2026-59763, CVE-2026-59765

Problem reports (3) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
297640maintainer-feedback? www/gitea 1.27.2 complains bash not found on startupNew2026-08-20
294089maintainer-feedback? www/gitea: service gitea restart fails, leaves gitea stoppedNew2026-08-18
296739maintainer-feedback? www/gitea: startup on boot failsNew2026-07-14

Commits (210)

Jochen Neumeister (joneum) · 1.1.3
- www/gitea: Update from 1.1.2 to 1.1.3 - Changelog: https://github.com/go-gitea/gitea/releases/tag/v1.1.3

PR:		221371
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	rene (mentor)
MFH:		2017Q3
Differential Revision:	https://reviews.freebsd.org/D11939
bf8844872d
Tobias Kortkamp (tobik) · 1.1.2
Update to 1.1.2

Changes:	https://blog.gitea.io/2017/06/release-of-1.1.2/

PR:		220021
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	mat (mentor)
Differential Revision:	https://reviews.freebsd.org/D11228
a7cd6dc3ae
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.1.1
Update to 1.1.1

Changes:	https://github.com/go-gitea/gitea/releases
PR:		219171
Submitted by:	Stefan Bethke <stb@lassitu.de> (maintainer)
9d5d75b28b
Tobias Kortkamp (tobik) · 1.1.0
Update to 1.1.0

- Update the sample configuration to add ISSUE_INDEXER_PATH in the new
  [indexer] section.  While here, alphabetize sections and variables
  so future updates are easier to diff.  Also merge duplicate section
  [session].

Changes:	https://blog.gitea.io/2017/03/release-of-1.1.0/

PR:		217694
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	lme (mentor)
Differential Revision:	https://reviews.freebsd.org/D9963
b784fa546d
Tobias Kortkamp (tobik) · 1.0.2
Update to 1.0.2

Changes:	https://blog.gitea.io/2017/02/release-of-1.0.2/
PR:		217314
Submitted by:	stb@lassitu.de (maintainer)
Approved by:	lme (mentor)
Differential Revision:	https://reviews.freebsd.org/D9789
1d4db8d096
Bartek Rutkowski (robak) · 1.0.1
www/gitea: update 1.0.0 -> 1.0.1

PR:		215824
Submitted by:	Stefan Bethke <stb@lassitu.de> (maintainer)
376eefbef8
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.0
Convert to options variable helper

- Add LICENSE_FILE

Approved by:	portmgr (blanket)
af582cf1fe
Thomas Zander (riggs) · 1.0.0
Update to upstream version 1.0.0

Detailed maintainer log:
- Update gitea to v1.0.0
- Add README, .gitignore templates and locale files
- Provide proper directory for avatar images in the example config file

PR:		215535
Submitted by:	stb@lassitu.de (maintainer)
48a787e0ca
Mathieu Arnold (mat) · 0.9.100
Do not use post-stage.  Use post-install instead.

The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
8b4093cba5
Kurt Jaeger (pi) · 0.9.100
New port: www/gitea

A self-hosted Git service as fork of https://gogs.io/

WWW: https://github.com/go-gitea/gitea/

PR:		214688
Submitted by:	Stefan Bethke <stb@lassitu.de>
53a93c08cc