recipe-maintainers/gitea
0
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Compare commits

base: recipe-maintainers/gitea:478d7a3137975f337525fbddf76b2d2cc09b34ff
Branches Tags
recipe-maintainers/gitea:main recipe-maintainers/gitea:upgrade-mariadb-10.11.19 recipe-maintainers/gitea:upgrade-28c01fd-rebased recipe-maintainers/gitea:upgrade-28c01fd recipe-maintainers/gitea:upgrade-1.27.3-rootless recipe-maintainers/gitea:upgrade-2f64ddf recipe-maintainers/gitea:fix-app-ini-writable recipe-maintainers/gitea:fix-app-ini-version recipe-maintainers/gitea:upgrade-7561bed recipe-maintainers/gitea:upgrade-273d214 recipe-maintainers/gitea:ci/app-ini-writable recipe-maintainers/gitea:lfs-plain-gitea
recipe-maintainers/gitea:3.6.5+1.27.3-rootless recipe-maintainers/gitea:3.6.4+1.27.2-rootless recipe-maintainers/gitea:3.6.3+1.27.1-rootless recipe-maintainers/gitea:3.6.2+1.27.1-rootless recipe-maintainers/gitea:3.6.1+1.26.2-rootless recipe-maintainers/gitea:3.6.0+1.24.2-rootless recipe-maintainers/gitea:3.5.3+1.24.2-rootless recipe-maintainers/gitea:3.5.2+1.24.2-rootless recipe-maintainers/gitea:3.5.1+1.24.2-rootless recipe-maintainers/gitea:3.5.0+1.24.2-rootless recipe-maintainers/gitea:3.4.0+1.24.2-rootless recipe-maintainers/gitea:3.3.1+1.23.8-rootless recipe-maintainers/gitea:3.3.0+1.23.1-rootless recipe-maintainers/gitea:3.2.0+1.23.1-rootless recipe-maintainers/gitea:3.1.1+1.23.1-rootless recipe-maintainers/gitea:3.1.0+1.23.0-rootless recipe-maintainers/gitea:3.0.3+1.22.6-rootless recipe-maintainers/gitea:3.0.2+1.22.6-rootless recipe-maintainers/gitea:3.0.1+1.22.3-rootless recipe-maintainers/gitea:3.0.0+1.22.2-rootless recipe-maintainers/gitea:2.11.0+1.22.2-rootless recipe-maintainers/gitea:2.10.1+1.22.2-rootless recipe-maintainers/gitea:2.10.0+1.22.1-rootless recipe-maintainers/gitea:2.9.1+1.22.0-rootless recipe-maintainers/gitea:2.9.0+1.22.0-rootless recipe-maintainers/gitea:2.8.0+1.21.11-rootless recipe-maintainers/gitea:2.7.0+1.21.11-rootless recipe-maintainers/gitea:2.6.2+1.21.10-rootless recipe-maintainers/gitea:2.6.1+1.21.10-rootless recipe-maintainers/gitea:2.6.0+1.21.5-rootless recipe-maintainers/gitea:2.5.2+1.21.5-rootless recipe-maintainers/gitea:2.5.1+1.21.4-rootless recipe-maintainers/gitea:2.5.0+1.21.1-rootless recipe-maintainers/gitea:2.4.0+1.21.0-rootless recipe-maintainers/gitea:2.3.3+1.20.5-rootless recipe-maintainers/gitea:2.3.1+1.20.1-rootless recipe-maintainers/gitea:2.3.2+1.20.3-rootless recipe-maintainers/gitea:2.1.2+1.19.3-rootless recipe-maintainers/gitea:1.3.1+1.17.3-rootless recipe-maintainers/gitea:2.3.0+1.20.1-rootless recipe-maintainers/gitea:2.2.0+1.19.3-rootless recipe-maintainers/gitea:2.1.0+1.18.5-rootless recipe-maintainers/gitea:2.0.1+1.18.2-rootless recipe-maintainers/gitea:2.0.0+1.18.0-rootless recipe-maintainers/gitea:1.3.0+1.17.2-rootless recipe-maintainers/gitea:1.2.1+1.16.8-rootless recipe-maintainers/gitea:1.2.0+1.16.3-rootless recipe-maintainers/gitea:1.1.3+1.15.10-rootless recipe-maintainers/gitea:1.1.2+1.15.6-rootless recipe-maintainers/gitea:1.1.1+1.15.3-rootless recipe-maintainers/gitea:1.1.0+1.15.0-rootless recipe-maintainers/gitea:1.0.0+1.14.5-rootless
..
compare: recipe-maintainers/gitea:3.6.2+1.27.1-rootless
Branches Tags
recipe-maintainers/gitea:main recipe-maintainers/gitea:upgrade-mariadb-10.11.19 recipe-maintainers/gitea:upgrade-28c01fd-rebased recipe-maintainers/gitea:upgrade-28c01fd recipe-maintainers/gitea:upgrade-1.27.3-rootless recipe-maintainers/gitea:upgrade-2f64ddf recipe-maintainers/gitea:fix-app-ini-writable recipe-maintainers/gitea:fix-app-ini-version recipe-maintainers/gitea:upgrade-7561bed recipe-maintainers/gitea:upgrade-273d214 recipe-maintainers/gitea:ci/app-ini-writable recipe-maintainers/gitea:lfs-plain-gitea
recipe-maintainers/gitea:3.6.5+1.27.3-rootless recipe-maintainers/gitea:3.6.4+1.27.2-rootless recipe-maintainers/gitea:3.6.3+1.27.1-rootless recipe-maintainers/gitea:3.6.2+1.27.1-rootless recipe-maintainers/gitea:3.6.1+1.26.2-rootless recipe-maintainers/gitea:3.6.0+1.24.2-rootless recipe-maintainers/gitea:3.5.3+1.24.2-rootless recipe-maintainers/gitea:3.5.2+1.24.2-rootless recipe-maintainers/gitea:3.5.1+1.24.2-rootless recipe-maintainers/gitea:3.5.0+1.24.2-rootless recipe-maintainers/gitea:3.4.0+1.24.2-rootless recipe-maintainers/gitea:3.3.1+1.23.8-rootless recipe-maintainers/gitea:3.3.0+1.23.1-rootless recipe-maintainers/gitea:3.2.0+1.23.1-rootless recipe-maintainers/gitea:3.1.1+1.23.1-rootless recipe-maintainers/gitea:3.1.0+1.23.0-rootless recipe-maintainers/gitea:3.0.3+1.22.6-rootless recipe-maintainers/gitea:3.0.2+1.22.6-rootless recipe-maintainers/gitea:3.0.1+1.22.3-rootless recipe-maintainers/gitea:3.0.0+1.22.2-rootless recipe-maintainers/gitea:2.11.0+1.22.2-rootless recipe-maintainers/gitea:2.10.1+1.22.2-rootless recipe-maintainers/gitea:2.10.0+1.22.1-rootless recipe-maintainers/gitea:2.9.1+1.22.0-rootless recipe-maintainers/gitea:2.9.0+1.22.0-rootless recipe-maintainers/gitea:2.8.0+1.21.11-rootless recipe-maintainers/gitea:2.7.0+1.21.11-rootless recipe-maintainers/gitea:2.6.2+1.21.10-rootless recipe-maintainers/gitea:2.6.1+1.21.10-rootless recipe-maintainers/gitea:2.6.0+1.21.5-rootless recipe-maintainers/gitea:2.5.2+1.21.5-rootless recipe-maintainers/gitea:2.5.1+1.21.4-rootless recipe-maintainers/gitea:2.5.0+1.21.1-rootless recipe-maintainers/gitea:2.4.0+1.21.0-rootless recipe-maintainers/gitea:2.3.3+1.20.5-rootless recipe-maintainers/gitea:2.3.1+1.20.1-rootless recipe-maintainers/gitea:2.3.2+1.20.3-rootless recipe-maintainers/gitea:2.1.2+1.19.3-rootless recipe-maintainers/gitea:1.3.1+1.17.3-rootless recipe-maintainers/gitea:2.3.0+1.20.1-rootless recipe-maintainers/gitea:2.2.0+1.19.3-rootless recipe-maintainers/gitea:2.1.0+1.18.5-rootless recipe-maintainers/gitea:2.0.1+1.18.2-rootless recipe-maintainers/gitea:2.0.0+1.18.0-rootless recipe-maintainers/gitea:1.3.0+1.17.2-rootless recipe-maintainers/gitea:1.2.1+1.16.8-rootless recipe-maintainers/gitea:1.2.0+1.16.3-rootless recipe-maintainers/gitea:1.1.3+1.15.10-rootless recipe-maintainers/gitea:1.1.2+1.15.6-rootless recipe-maintainers/gitea:1.1.1+1.15.3-rootless recipe-maintainers/gitea:1.1.0+1.15.0-rootless recipe-maintainers/gitea:1.0.0+1.14.5-rootless
3 Commits
478d7a3137 .. 3.6.2+1.27.1-rootless
Author SHA1 Message Date
notplants 1f987b4ab3 chore: publish 3.6.2+1.27.1-rootless release 2026-08-10 12:32:49 -04:00
notplants a8d2231e74 Merge pull request 'chore: upgrade gitea to 1.27.1-rootless' (#61) from upgrade-7561bed into master 
Reviewed-on: https://git.coopcloud.tech/coop-cloud/gitea/pulls/61
 2026-08-10 16:32:05 +00:00
autonomic-bot 096cc70fd9 chore: upgrade gitea to 1.27.1-rootless
cc-ci/testme cc-ci: success
Details 
Fixes two critical Gitea CVEs, both CVSS 9.8, both remediated in 1.27.1:
- CVE-2026-60004: RCE via POST /api/v1/repos/{owner}/{repo}/diffpatch — a patch
  submitted twice triggers an add/add conflict that writes an executable
  post-index-change hook into $GIT_DIR/hooks/, which git then runs as the Gitea
  service account. Affects 1.17-1.27.0; public PoC.
- CVE-2026-59774: unauthenticated arbitrary file read via Org-mode #+INCLUDE
  accepting absolute paths through the markup renderer (affects 1.22.1-1.27.0),
  escalating to RCE by reading config/tokens.

Based on current upstream main, so it includes the BREAKING CHANGE: remove forgejo
work; the previous branch predated it and was verified against a tree that would
not have deployed. Version label left at 3.6.0+1.24.2-rootless per upgrade-PR
convention (operator runs abra recipe release).
 2026-08-10 16:27:26 +00:00
2 changed files with 1 additions and 1 deletions
Expand all files Collapse all files
compose.yml
+1 -1
View File
@@ -87,7 +87,7 @@ services:
- "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolalloworiginlist=https://${GITEA_CORS_ALLOW_DOMAIN}"
- "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolmaxage=100"
- "traefik.http.middlewares.${STACK_NAME}_cors.headers.addvaryheader=true"
- coop-cloud.${STACK_NAME}.version=3.6.0+1.24.2-rootless
- coop-cloud.${STACK_NAME}.version=3.6.2+1.27.1-rootless
networks:
release/next → release/3.6.2+1.27.1-rootless
View File