Changelog for
cgit-debuginfo-0.9.1-8.5.1.x86_64.rpm :
* Fri Jul 05 2013 tiwaiAATTsuse.de- cgit-CVE-2013-2117-disallow-directory-traversal.patch: Fix cgit: remote file disclosure flaw (CVE-2013-2117, bnc#822166)
* Tue Nov 20 2012 vjtAATTopenssl.it- BuildRequire xz
* Tue Nov 20 2012 tiwaiAATTsuse.de- updated to cgit-0.9.1: Enhancements: - path-selected submodule links - intelligent default branch guessing - /etc/mime.types lookup - gitweb.
* and cgit.
* git-config support - case insensitive sorting and age sorting - commit, repository, and section sorting - bold currently viewed page in pagination - support BSDs in makefile Security: - CVE-2012-4465: heap-buffer overflow in parsing.c - CVE-2012-4548: syntax highlighting command injection Bug Fixes: - transition maintainer to Jason Donenfeld (zx2c4) - download git snapshot from github instead of Lars\' old server - css fixes - stablization of tests - more compatible default highlight script - suppress gzip timestamp so that tarballs only use tar timestamps - treat ctags as target in makefile - do not let global variables override certain local repo settings - print ampersand as proper html entity - use placeholder for empty commit subject - format diff view for addition and removal of files - point links at correct blob from ssdiff- drop obsoleted patches cgit-CVE-2011-2711-fix.diff cgit-CVE-2012-4465-fix.diff cgit-CVE-2012-4548-fix.diff
* Mon Oct 29 2012 tiwaiAATTsuse.de- cgit-CVE-2012-4548-fix.diff: Fix VUL-0: cgit: arbitrary code / command execution via improperly quoted arguments (CVE-2012-4548, bnc#787074)
* Wed Oct 10 2012 tiwaiAATTsuse.de- Fix VUL-0: specially-crafted commits can trigger a heap-based buffer overflow (CVE-2012-4465, bnc#783012)
* Mon Feb 13 2012 cooloAATTsuse.com- patch license to follow spdx.org standard
* Mon Nov 28 2011 zooeyAATThirschkaefer.de- Add patch cgit-fix-more-read_tree_recursive-invocations.diff: There are more incorrect invocations of read_tree_recursive(), one example can be seen when visiting one of the \'plain\' links in the tree view (contents of the wrong file are shown). This time I did what I should have done last time and checked and adjusted all invocations of read_tree_recursive().
* Tue Nov 22 2011 saschpeAATTsuse.de- Add patch cgit-fix-print-tree.diff: The cgit build fix with respect to git-1.7.6 is incomplete: in the file ui-tree.c ls_tree() has been patched to use pathspec when invoking read_tree_recursive(), but cgit_print_tree() has no t been touched. The resulting problem can be seen when browsing the tree of a cgit repository: when you \"drill down\" into subfolders, parts of the parent folder\'s contents will appear in the listing. This patch adjusts cgit_print_tree() accordingly, which fixes the problem.
* Fri Oct 14 2011 tiwaiAATTsuse.de- split from OBS git repo to an individual repo (since cgit-0.9 doesn\'t build with git-1.7.7)- merged fixes in git repo back to cgit repo- updated to git 1.7.6.4
* Wed Aug 03 2011 asnAATTcryptomilk.org- updated to cgit 0.9.0.2- fixed potential XSS vulnerability in rename hint- fixed a segfault with git 1.7.6
* Mon Jun 27 2011 tiwaiAATTsuse.de- updated to git 1.7.6: see git changelog for more details
* Mon Jun 06 2011 tiwaiAATTsuse.de- updated to git 1.7.5.4: see git changelog for more details
* Mon Jun 06 2011 tiwaiAATTsuse.de- Fix incompatibilies with git 1.7.5.x to build cgit again
* Wed Jun 01 2011 mmarekAATTnovell.com- Do not buildrequire git, the package builds it\'s own git and the buildrequires line only makes backporting harder.
* Fri May 27 2011 tiwaiAATTsuse.de- updated git 1.7.5.3: See git changelog for more details
* Mon Mar 28 2011 tiwaiAATTsuse.de- updated to git 1.7.4.2: documentation updates, small bug fixes; see included Documentation/RelNotes/1.7.4.2.txt- updated to cgit 0.9: major updates; using git-1.7.4.x
* Fri Dec 17 2010 tiwaiAATTsuse.de- updated to git 1.7.3.3: In addition to the usual fixes, this release also includes support for the new \"add.ignoreErrors\" name given to the existing \"add.ignore-errors\" configuration variable.- updated to git 1.7.3.4: Among many fixes since v1.7.3.3, it contains a fix to a recently discovered XSS vulnerability in Gitweb (CVE 2010-3906)
* Thu Sep 30 2010 tiwaiAATTsuse.de- updated to git 1.7.3: major version update; new options and behavior for git-rebase, git-clean, git-checkout, git-gui. See release note: http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.7.3.txt- updated to git 1.7.3.1: fix git-stash breakages- Set NO_CROSS_DIRECTORY_HARDLINKS=1 to satisfy BS
* Fri Aug 20 2010 anschneiderAATTexsuse.de- fixed more segfaults in cgit.
* Fri Aug 20 2010 anschneiderAATTexsuse.de- fix cgit segfault when using git > 1.7- update to version 0.8.3.3- get debuginfo working, don\'t strip binaries.
* Fri Aug 20 2010 tiwaiAATTsuse.de- updated to git 1.7.2.2
* Thu Jul 29 2010 tiwaiAATTsuse.de- fix missing link with libpthread
* Thu Jul 29 2010 tiwaiAATTsuse.de- updated to git 1.7.2.1: minor fixes for git-instaweb, git-web, git-config. See release note: http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.7.2.1.txt
* Thu Jul 22 2010 tiwaiAATTsuse.de- updated to git 1.7.2: mostly bug fixes and small enhancements; see the release note: http://www.kernel.org/pub/software/scm/git/docs/RelNotes-1.7.2.txt- gitweb stuff is moved to /usr/share/gitweb
* Sun Apr 25 2010 poletti.marcoAATTgmail.com- Build against version 1.7.0.3 of git instead of 1.6.4.3.
* Fri Feb 05 2010 poletti.marcoAATTgmail.com- Initial release, version 0.8.3.1
