CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

www/gitlab19.5.0_1

Web GUI for managing git repositories

Maintainer
mfechner@FreeBSD.org
Packages
gitlab-ce 19.5.0_1, gitlab-ee 19.5.0_1
Upstream
up to date
CPE
none, CVEs only via VuXML
WWW
https://gitlab.com/
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (1) · listed, port not fixed yet

Fixed (166)

VuXML entries whose affected range this version has left.

Commits (322)

Torsten Zuehlsdorff (tz) · 8.11.11
www/gitlab: Update from 8.10.13 to 8.11.11

Changelog: https://github.com/gitlabhq/gitlabhq/blob/v8.11.11/CHANGELOG

Approved by: mentors (implicit)
d903a558a4
Torsten Zuehlsdorff (tz) · 8.10.13
www/gitlab: Update from 8.10.12 to 8.10.13

Changes: https://github.com/gitlabhq/gitlabhq/blob/v8.10.13/CHANGELOG

Approved by: junovitch (mentor, implicit)
b16be57761
Torsten Zuehlsdorff (tz) · 8.10.12
www/gitlab: Update from 8.9.6 to 8.10.12

Changes: https://github.com/gitlabhq/gitlabhq/blob/v8.10.12/CHANGELOG

Approved by: junovitch (mentor, implicit)
28020dfaab
Torsten Zuehlsdorff (tz) · 8.9.6_4
www/gitlab: Unbreak after update of databases/rubygem-pg

Approved by: junovitch (mentor, implicit)
6d8621a62a
Torsten Zuehlsdorff (tz) · 8.9.6_3
www/gitlab: Use www/rubygem-turbolinks-classic instead of www/rubygem-turbolinks

This fixes various problems with the issue-pages of GitLab

PR:          213218
Approved by: junovitch (mentor, implicit)
9535fbe797
Torsten Zuehlsdorff (tz) · 8.9.6_2
www/gitlab: Unbreak after update of www/rubygem-turbolinks

Approved by: junovitch (mentor, implicit)
b426bcba09
Torsten Zuehlsdorff (tz) · 8.9.6
devel/rubygem-devise: switch to Rails 4 and fix fallout

Remove support of Rails 3 since we are obsoleting this version from the
ports-tree. This fixes the fallout-message to ruby@.

Also DEPRECATE rubygem-devise-rails4 in favor of rubygem-devise
and adjust dependencies of security/rubygem-devise-two-factor and
www/gitlab.

Approved by: pi (mentor)
37ad991af6
Torsten Zuehlsdorff (tz) · 8.9.6
www/gitlab: Update from 8.8.7 to 8.9.6

Changes: https://github.com/gitlabhq/gitlabhq/blob/v8.9.6/CHANGELOG

Approved by: junovitch (mentor, implicit)
c488755cf7
Mathieu Arnold (mat) · 8.8.7
When there is a do-install target, do not use a post-install target, do everything at once.  Sometime, rename post-install into a options helper target.

I did not fix ports that were such a mess that I could not figure out
what they really wanted to do.  I also did not change ports that had
some version of an auto-plist code in post-install, for the same reason.

With hat:	portmgr
Sponsored by:	Absolight
f899c758a6
Torsten Zuehlsdorff (tz) · 8.8.7
www/gitlab: update from 8.8.5 to 8.8.7

8.8.7
  - Fix privilege escalation issue with OAuth external users.
  - Ensure references to private repos aren't shown to logged-out users.

8.8.6
  - Fix visibility of snippets when searching.
  - Update omniauth-saml to 1.6.0

Approved by: junovitch (mentor, implicit)
Security:    CVE-2016-5697
MFH:         2016Q3
ff96e18161
Torsten Zuehlsdorff (tz) · 8.8.5_1
www/gitlab: fix typo in files/patch-lib_support_nginx_gitlab-ssl

Fix wrong root directory for HTTP error codes 404, 422, 500, 502
and 503 point.

Submitted by: Jose Luis Duran <jlduran@gmail.com>
Approved by:  pi (mentor)
ae7a1de1b9
Torsten Zuehlsdorff (tz) · 8.8.5
www/gitlab: Update from 8.7.5 to 8.8.5

Changelog: https://github.com/gitlabhq/gitlabhq/blob/8-8-stable/CHANGELOG

PR:          209903
Approved by: swills (mentor)
4b88390e7c
Torsten Zuehlsdorff (tz) · 8.7.5
Change MAINTAINER from ports@toco-domains.de to tz@FreeBSD.org

Approved by:	junovitch (mentor)
fa23faa40b
Bartek Rutkowski (robak) · 8.7.5
www/gitlab: update 8.7.2 -> 8.7.5

PR:		209609
Submitted by:	Torsten Zuehlsdorff <ports@toco-domains.de> (maintainer)
5dfc845f58
Kurt Jaeger (pi) · 8.7.2
www/gitlab: 8.7.1 -> 8.7.2

Changes:
  https://about.gitlab.com/2016/05/03/gitlab-8-dot-7-dot-2-released/

PR:		209265
Submitted by:	Torsten Zuehlsdorff <ports@toco-domains.de> (maintainer)
cf30fdfa48
Kurt Jaeger (pi) · 8.7.1
www/gitlab: 8.7.0 -> 8.7.1

Changes:
  https://about.gitlab.com/2016/05/02/cve-2016-4340-patches/

PR:		209225
Submitted by:	Torsten Zuehlsdorff <ports@toco-domains.de> (maintainer)
Security:	CVE-2016-4340
c051634a45
Kurt Jaeger (pi) · 8.7.0
www/gitlab: 8.6.6 -> 8.7.0

Changes:
  https://github.com/gitlabhq/gitlabhq/blob/master/CHANGELOG

PR:		209138
Submitted by:	Torsten Zuehlsdorff <ports@toco-domains.de> (maintainer)
37912dfbd5
Bartek Rutkowski (robak) · 8.6.6
www/gitlab: update 8.6.5 -> 8.6.6

- Pet portlint

PR:		208886
Submitted by:	iTorsten Zuhlsdorff <ports@toco-domains.de> (maintainer)
6352c09898
Kurt Jaeger (pi) · 8.6.5
www/gitlab: 8.5.5 -> 8.6.5

PR:		208511
Submitted by:	Torsten Zuehlsdorff <ports@toco-domains.de> (maintainer)
Reviewed by:	xmj, miks.mikelsons@gmail.com
4297ad5d48
Steve Wills (swills) · 8.5.5
www/gitlab: remove unneeded dependency on ruby
26a3aaf079
Mathieu Arnold (mat) · 8.5.5
Remove ${PORTSDIR}/ from dependencies, categories v, w, x, y, and z.

With hat:	portmgr
Sponsored by:	Absolight
72ea7e696b
Kurt Jaeger (pi) · 8.5.5
New port: www/gitlab

GitLab is version control for your server.

WWW: https://gitlab.com/

Submitted by: Torsten Zuehlsdorff <ports@toco-domains.de>
Reviewed by: Yonas Yanfa <yonas@fizk.net>, girgen, pgollucci, mmoll, miwi, xmj, swills, amdmi3, sunpoet
6f896f84ec