CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

www/opengist 1.15.2_3

Self-hosted pastebin powered by Git, open-source alternative to Github Gist

Port info

Maintainer
fox@FreeBSD.org
Packages
latest: 1.15.2_3
Upstream
up to date
Last update
to 1.15.2_3 · d81b7ba3c3
Quarterly
2026Q4: 1.15.2_3 · last MFH 60647eff54
WWW
https://opengist.io/
Links
cgit · VuXML

Install

Package
# pkg install opengist
installs 1.15.2_3 from latest; from quarterly (2026Q4) 1.15.2_3
Port
# cd /usr/ports/www/opengist && make install clean
Size
14 MiB download · 47 MiB installed
Depends on
devel/git 2.56.0
License
AGPLv3
Creates
user opengist, group opengist

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.15.2_31.15.2_2–
FreeBSD 151.15.2_31.15.2_2–
FreeBSD 141.15.2_31.15.2_2✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.15.2_31.15.2_2–
FreeBSD 141.15.2_31.15.2_2✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.15.2_3.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (38)

Dag-Erling Smørgrav (des) · 1.15.2_3 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Dag-Erling Smørgrav (des) · 1.15.2_1
various: Drop Go 1.26+ version pin

This is a nop since 1.26 is the oldest supported version.
2c73fa4d6e
Adam Weinberger (adamw) · 1.15.2_1
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Santhosh Raju (fox) · 1.15.2
www/opengist: Update to 1.15.2

Changes since 1.15.1:

v1.15.2

Added

  * Anonymous LDAP user search (#794).

Fixed

  * Prevent writes through symbolic links in gists (#799).
  * Prevent server crashes when rendering empty CSV files.
  * Invalid header handling in Git `cat-file` batch reader (#802).
  * Overlapping headers in narrow embeds (#803).
d073fb880d
Dag-Erling Smørgrav (des) · 1.15.1_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Santhosh Raju (fox) · 1.15.1
www/opengist: Update to 1.15.1

Changes since 1.14.0:

v1.15.1

Fixed

  * Admin pagination with new URLs (#782).
  * Stop unbounded diff content growth for large files (#787).

v1.15.0

Added

  * UI rework (#757).
  * Gist settings page, with metadata edition and danger zone (#757).
  * Explore users page, with search and sorting (#757).
  * Explore topics page (#757).

Changed

  * Move reserved routes under the `/-/` prefix: `/-/login`,
    `/-/register`, `/-/all`, `/-/search`, `/-/topics`,
    `/:user/-/liked`, ... (#757).

Fixed

  * Improve Git dumb HTTP security (#780).
  * OIDC scope includes trailing whitespace if groups not configured
    (#775).
  * Return 200 for `HEAD /` so uptime monitors don't fail (#773).
  * Bind strategy configuration to deployment in Helm chart (#777).
  * `OG_OPENGIST_HOME` env var in Dockerfile (#779).

Other

  * Update deps (#776).
b496a8c50f
Santhosh Raju (fox) · 1.14.0
www/opengist: Update to v1.14.0

- Remove assets dir, they are already bundled in the binary
- Fix the broken rc service that would not shut down correctly
- Move the pidfiles to /var/run/ to avoid needing to create a dir
- Use the prebuilt frontend assets published upstream, dropping the
  npm build dependency
- Enable aarch64

Reviewed by:	fox
Differential Revision:	https://reviews.freebsd.org/D58255
dc20e3ca24
Dag-Erling Smørgrav (des) · 1.13.1_2 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Dag-Erling Smørgrav (des) · 1.13.1_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Santhosh Raju (fox) · 1.13.1
www/opengist: Update to 1.13.1

Changes since 1.12.2:

v1.13.1

Fixed

  * Embedding fix vertical scrolling and improve padding (#714).
  * Fix CSS url for json embed url (#715).

v1.13.0

Added

  * REST API (#707) (#711) (#702).
  * Limit display if there is too much files in one gist (#701).
  * Topics git push option in post-receive hook (#698).
  * Allow embedding Gists for a certain file only (#709).
  * Arabic Translation (#706).

Fixed

  * Server SSH key generation (#708).

Other

  * Update deps Golang, JS, Docker deps (#713).
  * New docs website (#710).
94f8d7ab4f
Dag-Erling Smørgrav (des) · 1.12.2_1
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Santhosh Raju (fox) · 1.12.2
www/opengist: Update to 1.12.2

Changes since 1.12.1:

v1.12.2

Added

  * Search all fields (#622).
  * Display a form to create an Opengist account coming from a OAuth
    provider (#623).
  * Rebuild search index in admin options (#647).

Fixed

  * Clean file path names on file creation (#624).
  * Support UTF-8 on gist download (#625).
  * CSRF skipper only for GET *.js request (#627).
  * Async-loaded gist embed scripts (#630).
  * Make gists username/urls case insensitive in URLS (#641).
  * Improve code search and index tests (#663).
  * Translation strings (#659).
  * Gitea avatar URL on OAuth (#674).

Admins of Opengist instances may want to run "Rebuild search index"
in the admin panel.
0733e12c21
Adam Weinberger (adamw) · 1.12.1_2
various: Bump ports for Go 1.25.10
4e243a83f8
Adam Weinberger (adamw) · 1.12.1_1
various: Bump ports for Go 1.25.8
a8d318da7c
Santhosh Raju (fox) · 1.12.1
www/opengist: Update to 1.12.1

Remove aarch64 support, since tailwindcss 4 is currently not supported
in aarch64.

Changes since 1.11.1:

v1.12.1

Added

  * More translation strings (#605)

Fixed

  * Allow Access Tokens with Required Login (#611)
  * Make text files renderable with mimetypes different than text/plain
    (#612)
  * Improve security on raw files endpoint (#613)

Admins of Opengist instances may want to run "Synchronize all gists
previews" in the admin panel.

v1.12.0

Added

  * Access tokens (#602)
  * Fuzzy search for gist search (#555)
  * Allow Unicode letters/numbers in topics (#597)
  * Resize editor height (#600)
  * More translation strings (#516) (#604)

Fixed

  * Don't panic on Go TCP errors (#601)

Other

  * Reduce footprint of Docker image (#515)
  * Update Go + JS deps (#603)
  * Configure Dependabot for updates on Go and NPM (#449)

Helm Chart

  * Use existing pvc claim of provided (#547)
  * Adds StatefulSet support (#549)
  * Move Prom metrics to a dedicated port + support ServiceMonitor
    (#599)
185a69c938
Adam Weinberger (adamw) · 1.11.1_4
various: Bump ports for Go default 1.24->1.25
97685c1886
Santhosh Raju (fox) · 1.11.1_3
www/opengist: Fix ownership for directories.

Also fixes the build failure.
11eeaad69d
Adam Weinberger (adamw) · 1.11.1_2
various: Bump Go ports for 1.24.13
529df949a5
Santhosh Raju (fox) · 1.11.1_1
www/opengist: Fix user creation and usage.

PR:		292747
Reported by:	Swee <meow@swee.codes>
7388630534
Adam Weinberger (adamw) · 1.11.1_1
various: Bump Go ports for 1.24.12
013f2d30b0
Santhosh Raju (fox) · 1.11.1
www/opengist: Remove pinned deprecated version of go.

Depend on latest version of go from now on.
39296a587f
Adam Weinberger (adamw) · 1.11.1
many: Unsupported Go dep; deprecate and schedule for removal

There are about 75 ports that depend on old, unsupported Go
versions. I've scheduled those Go versions for deletions on
2025/01/01, and so these ports are scheduled for removal on
that same day.

HOWEVER....

Likely NONE or VERY VERY FEW of these ports will actually need
to be deleted! This stems from a misunderstanding:

When go.mod says "go 1.23", it means that it requires AT LEAST
go-1.23. Locking a port to a specific go version should almost
never happen; it is reserved for when a package absolutely
cannot build with any newer version, and it almost means that
the port will only last 1 year (Go releases new minors twice a
year).

Where a port has
USES=go:1.23
maintainers should attempt build with just
USES=go

If that works, please either commit it or submit it in a PR.

Same goes go
USES=go:1.23,modules
to attempt
USES=go,modules
f45b1d07f5
Santhosh Raju (fox) · 1.11.1
www/opengist: fix missing arm64 esbuild by reordering npm bundling

... and regenerate the archive

While here, pet portclippy & drop unsupported architectures.

PR:             290788
Sponsored by:   SkunkWerks, GmbH
Tested by:      poudriere
Fixes:          4bd4a4e185d870ded9a3cafa16e35a08fc168ea3
f97eb171fb
Dave Cottlehuber (dch) · 1.11.1
www/opengist: fix build after borked pkg-plist

Remove rc.d script inadvertently added, as it is is handled already by
USES_RC_SUBR.

Tested by:	poudriere
Approved by:	portmgr (build fix blanket)

Fixes:	4bd4a4e185d870ded9a3cafa16e35a08fc168ea3
a00c851d1e
Santhosh Raju (fox) · 1.11.1
www/opengist: Update to 1.11.1

Changes since 1.10.0:

v1.11.1

Added

  * More translation strings (#511)

Fixed

  * CSV errors for rendering (#514)

Other

  * Reset default log level to warn

v1.11.0

Added

  * LDAP authentication (#470)
  * Listen to Unix websocket (#484)
  * Binary files support (#503)
  * Support for rendering .ipynb Jupyter/IPython notebooks (#491)
  * File upload on gist creation/edition (#507)
  * Read psql sslmode from db uri (#462)
  * OIDC group claim name to OpenID request (#490)
  * Reworked user settings page (#467)
  * Style preference tab for user (#467)
  * Init gist with regular urls via git CLI (http) (#501)

Fixed

  * Gitlab avatar (#461)
  * Correct German spelling, use consistent wording (#468)
  * Filename unescape (#474)
  * Fix Markdown preview links (#475)
  * Replace Unicode characters with HTML entity codes in embed template (#480)
  * Redirect to $baseUrl after auth with passkey instead of / (#482)
  * Human date on iOS devices (#510)

Docs

  * Add Proxmox VE Helper-Script (#473)

Other

  * Use Helm deployment.env[] values (#471)
  * Update Helm Postgres version
  * Use database for Gist init queue (#498)
  * Update go dep chroma (#493)
625e945f11
Adam Weinberger (adamw) · 1.10.0_1
go123 ports: Bump for 1.23.12
b6703954e3
Santhosh Raju (fox) · 1.10.0
www/opengist: Update to 1.10.0

Changes since 1.9.1:

v1.10.0

Deprecations

Removed in the next SemVer MAJOR version of Opengist.
  * Use the configuration option index/OG_INDEX instead of
    index.enabled/OG_INDEX_ENABLED. The default value is bleve.
  * The configuration index.dirname/OG_INDEX_DIRNAME will be removed.
    If you're using Bleve, the path of the index will be opengist.index.

Added

  * Helm Chart (#454)
  * Meilisearch indexer (#444)
  * Prometheus metrics (#439)
  * Config to name the OIDC provider (#435)
  * Read admin group from OIDC token claim (#445)
  * More translation strings (#438)

Fixed

  * Garbled text display issues for non-English Unicode characters in
    browsers (#441)
  * Test database when running go test (#442)
  * Allow lag between admin invitation creation and test assertion (#452)
  * gist.html using relative URL (#451)
  * Do not hide file delete button on gist edit page (#447)

Other

  * Update deps Golang & JS deps (#455)
4bd4a4e185
Adam Weinberger (adamw) · 1.9.1_1
go: Bump ports for go124 update
a4e30d4f4f
Santhosh Raju (fox) · 1.9.1
www/opengist: Update to 1.9.1

Changes since 1.8.4:

v1.9.1

Added

  * More translation strings (#401)

Fixed

  * SQL query for MySQL/Postgres on user profile (#424)
  * User avatar on gist likes list (#425)

Other

  * Update deps Golang & JS deps (#430)

v1.9.0

Added

  * Topics (tags) for Gists (#413)
  * Gist languages saved in database (#422)
  * Search gists on user profile with title, visibility, language & topics (#422)
  * Jdenticon for default avatars (#416)
  * Git push option for description (#412)
  * MIME type support for raw file serving (#417)

Fixed

  * Skip CSRF for embed gists (#402)
  * Remove CSRF check for Git HTTP packs (#408)
  * Replace path.Join with filepath.Join for file system paths (#414)
  * Empty password error when trying to change the username (#418)
  * Save content form on gist create error (#420)

Other

  * Refactor server code (#407)
  * Remove memdb for gist init (#421)
  * Added Opengist Docker images to Docker Hub

Important

Admins should head to the Admin Panel and click Synchronize all gists
languages to register automatically all Gist languages for previous Gists.
This is not needed for newer Gists created on Opengist 1.9.
62f6333770
Santhosh Raju (fox) · 1.8.4
www/opengist: Build fixes and improvements

un-break arm64 by installing both esbuild arches
    - stop lang/go from fetching newer toolchains during build
    - pet port with portfmt & portclippy, fix pkg-plist

run under non-root user by default
    - add UID, GID for opengist user
    - amend rc script to support user

PR:	        285179
Reviewed by:	fox
Sponsored by:   SkunkWerks, GmbH
0e4fb336cb
Adam Weinberger (adamw) · 1.8.4_1
Bump all go ports for yesterday's releases
d0642a6176
Santhosh Raju (fox) · 1.8.4
www/opengist: Update to 1.8.4

Changes since 1.8.3:

v1.8.4

Added

  * More translation strings (#398)
  * Custom instance names (#399)

Fixed

  * Prevent passwords managers autofill on filename inputs (#357)
a554b7f598
Santhosh Raju (fox) · 1.8.3
www/opengist: Update to 1.8.3

Changes since 1.8.2:

v1.8.3

Changed

  * Throw warn instead of fatal on Git global config init failure (#392)
  * Define esbuild as a Javascript dependency for all other platforms (#393)
3178aa2889
Santhosh Raju (fox) · 1.8.2
www/opengist: Update to 1.8.2

Update the default location of the DB.

Changes since 1.8.1:

v1.8.2

Added

  * More translation strings (#373) (#388)

Changed

  * Enforce git config on startup (#383)
  * Respect file scheme URIs for SQLite. (#387)

Fixed

  * Convert octal notation file names in Git (#380)
  * Git clone on SSH with MySQL (#382)
  * Escaping for embed gists (#381)

Other

  * Update deps Golang & JS deps
b395ce142c
Santhosh Raju (fox) · 1.8.1
www/opengist: Mark as broken on aarch64
8cbfc1d217
Santhosh Raju (fox) · 1.8.1
www/opengist: Mark as broken on i386

Reported by:	pkg-fallout
ae2ef5f4fb
Santhosh Raju (fox) · 1.8.1
www/opengist: New Port: Self-hosted Pastebin powered by Git

Self-hosted pastebin powered by Git, open-source alternative to Github Gist.

WWW: https://opengist.io/
b60b3ff7ca