Commit Graph

3 Commits

Author SHA1 Message Date
Sergey Torokhov
f23252c9f6 www-apps/gogs: drop security vulnerability affected version
The git hook feature in Gogs 0.5.5 through 0.12.2
allows for authenticated remote code execution [1].

[1] https://nvd.nist.gov/vuln/detail/CVE-2020-15867

Signed-off-by: Sergey Torokhov <torokhov-s-a@yandex.ru>
2020-10-24 15:31:50 +03:00
Sergey Torokhov
0ef05ac1fb www-apps/gogs: 0.12.3 version bump
Note:
This package is maintainer-needed,
update to fix security vulnerability
https://nvd.nist.gov/vuln/detail/CVE-2020-15867

Ebuild updates:
Add RESTRICT="mirror" due to large number of downloading pkgs,
sort IUSE flags.

Move patched config to /etc/gogs/custom/conf/app.ini
to prevent warning about abcence of config on service start
and fallback to /etc/gogs/conf/app.ini (leave as example).

Known issue:
Despite of set db+path in custom/conf/app.ini and
in templates/install.tmpl and passsing right path to database
in html-page as
<input id="db_path" name="db_path" value="/var/lib/gogs/database/gogs.db">
on selecting the SQLite3 base the default path is still data/gogs.db

Signed-off-by: Sergey Torokhov <torokhov-s-a@yandex.ru>
2020-10-24 15:16:16 +03:00
Denis Reva
d74bbd02b6 www-apps/gogs: new package
Gogs is self-hosted git system that less bloatware
than www-apps/gitea, so I decided to create ebuild
 Please test it integrity because I'm not sure it
would work perfect despite it builds without error

Package-Manager: Portage-3.0.4, Repoman-3.0.1
Signed-off-by: Denis Reva <denis7774@gmail.com>
2020-09-10 18:00:32 +05:00