notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine
I started running short on disk space for the non-production FreshPorts hosts. This time, I have decided to ask for donations. See my recent blog post which points to my Patreon account.
Port details on branch 2024Q2
forgejo Compact self-hosted Git service
7.0.4 www on this many watch lists=0 search for ports that depend on this port This port version is marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout 7.0.4Version of this port present on the latest quarterly branch.
Maintainer: stb@lassitu.de search for ports maintained by this maintainer
Port Added: 2024-04-11 06:42:05
Last Update: 2024-06-19 06:42:50
Commit Hash: d18807b
License: MIT
WWW:
https://forgejo.org/
Description:
A self-hosted Git service. Forgejo is a community managed soft-fork of Gitea, which is a fork of Gogs, lightweight code hosting solution written in Go and published under the MIT license.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
Expand this list (9 items)
Collapse this list.
  1. /usr/local/share/licenses/forgejo-7.0.4/catalog.mk
  2. /usr/local/share/licenses/forgejo-7.0.4/LICENSE
  3. /usr/local/share/licenses/forgejo-7.0.4/MIT
  4. @sample etc/forgejo/conf/app.ini.sample
  5. etc/forgejo/conf/app.ini.defaults
  6. sbin/forgejo
  7. @owner
  8. @group
  9. @mode
Collapse this list.
USE_RC_SUBR (Service Scripts)
  • no SUBR information found for this port
Dependency lines:
  • forgejo>0:www/forgejo
To install the port:
cd /usr/ports/www/forgejo/ && make install clean
To add the package, run one of these commands:
  • pkg install www/forgejo
  • pkg install forgejo
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: forgejo
Flavors: there is no flavor information for this port.
distinfo:
TIMESTAMP = 1718527772 SHA256 (forgejo-src-7.0.4.tar.gz) = 881e55d92a4145238a8e7a39dd5c64d547c7629361005ded0393f33ec9e6bba4 SIZE (forgejo-src-7.0.4.tar.gz) = 54935871

No package information for this port in our database
Sometimes this happens. Not all ports have packages. Perhaps there is a build error. Check the fallout link: pkg-fallout
Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. gmake>=4.4.1 : devel/gmake
  2. go121 : lang/go121
Runtime dependencies:
  1. git : devel/git
  2. git-lfs : devel/git-lfs
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for forgejo-7.0.4: BINDATA=on: Build a single monolithic binary, with all assets included GIT_LFS=on: Support for Git Large File Storage (LFS) PAM=on: Enable support for PAM SQLITE=on: SQLite database support ===> Use 'make config' to modify these settings
Options name:
www_forgejo
USES:
cpe gmake go:1.21,no_targets
pkg-message:
For install:
Before starting forgejo you must create the main configuration file. cp /usr/local/etc/forgejo/conf/app.ini.sample /usr/local/etc/forgejo/conf/app.ini ${EDITOR} /usr/local/etc/forgejo/conf/app.ini You need to replace every occurence of CHANGE_ME in the file with sensitive values. Please refer to the official documentation for details.
Master Sites:
Expand this list (1 items)
Collapse this list.
  1. https://codeberg.org/forgejo/forgejo/releases/download/v7.0.4/
Collapse this list.

Number of commits found: 5

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
7.0.4
19 Jun 2024 06:42:50
commit hash: d18807bcfba5dd79b8d8fdce2c6baf9f962fa69fcommit hash: d18807bcfba5dd79b8d8fdce2c6baf9f962fa69fcommit hash: d18807bcfba5dd79b8d8fdce2c6baf9f962fa69fcommit hash: d18807bcfba5dd79b8d8fdce2c6baf9f962fa69f files touched by this commit This port version is marked as vulnerable.
Fernando ApesteguĂ­a (fernape) search for other commits by this committer
Author: Stefan Bethke
www/forgejo: update to 7.0.4 (fixes security vulnerabilities)

CVE-2024-24789: the archive/zip package's handling of certain types of invalid
zip files differs from the behavior of most zip implementations. This
misalignment could be exploited to create an zip file with contents that vary
depending on the implementation reading the file.

PR:		279781
Reported by:	stb@lassitu.de (maintainer)
MFH:		2024Q2
Security:	CVE-2024-24789

(cherry picked from commit be43fb2830c94e23e0d9aa49ef9b982b0ab31e2c)
1.21.10.0_3
15 Jun 2024 09:58:21
commit hash: 4ce9aac81b75f82a841319f0297f45ded1cbe8b0commit hash: 4ce9aac81b75f82a841319f0297f45ded1cbe8b0commit hash: 4ce9aac81b75f82a841319f0297f45ded1cbe8b0commit hash: 4ce9aac81b75f82a841319f0297f45ded1cbe8b0 files touched by this commit This port version is marked as vulnerable.
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump after lang/go122 update

MFH:		2024Q2
(cherry picked from commit b24868e7be03b2ce962ee5e9ead293c10dc15cfb)
1.21.10.0_2
13 May 2024 18:28:41
commit hash: 8db69aebd121759c5b407c78e9e82a26b229efb9commit hash: 8db69aebd121759c5b407c78e9e82a26b229efb9commit hash: 8db69aebd121759c5b407c78e9e82a26b229efb9commit hash: 8db69aebd121759c5b407c78e9e82a26b229efb9 files touched by this commit This port version is marked as vulnerable.
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump after lang/go121 update

MFH:		2024Q2
(cherry picked from commit fce0cc32720e61042bc675152b116f9e61532e92)
1.21.10.0_1
15 Apr 2024 08:31:41
commit hash: 0bbb270314a986cf7200e39bb7c49823b7147b75commit hash: 0bbb270314a986cf7200e39bb7c49823b7147b75commit hash: 0bbb270314a986cf7200e39bb7c49823b7147b75commit hash: 0bbb270314a986cf7200e39bb7c49823b7147b75 files touched by this commit This port version is marked as vulnerable.
Ashish SHUKLA (ashish) search for other commits by this committer
all: Bump after lang/go121 update

MFH:		2024Q2
(cherry picked from commit 32b284679a1954ef1e0c0d52c4741d00e36dc6e0)
1.21.10.0
11 Apr 2024 06:41:28
commit hash: a411e8c859bbed168997e9b930f11de8fa3f4cc0commit hash: a411e8c859bbed168997e9b930f11de8fa3f4cc0commit hash: a411e8c859bbed168997e9b930f11de8fa3f4cc0commit hash: a411e8c859bbed168997e9b930f11de8fa3f4cc0 files touched by this commit This port version is marked as vulnerable.
Fernando ApesteguĂ­a (fernape) search for other commits by this committer
Author: Stefan Bethke
www/forgejo: update to v1.21.8-0

PR:		278119
Reported by:	stb@lassitu.de (maintainer)
MFH:		2024Q2 (security fix)
Security:	CVE-2023-45288

(cherry picked from commit e2de6b1f887b2ef36fad6b574a292889eab66ea1)

Number of commits found: 5