lsd-cat

Gogs 0.13 (sqlite) to Gitea 1.0.2 (and upper)

Quoting the Gitea docs:

Upgrading from Gogs 0.12.x and above will be increasingly more difficult as the projects diverge further apart in configuration and schema.

Since gogs has now multiple unfixed RCEs and has for a while, it is imperative to either turn it off or migrate. The problem is, what to do if running a version > 0.11.x?

• https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-1/
• https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-2/
• https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/