Changelog for
cgit-1.2.3-lp155.10.2.x86_64.rpm :
* Wed Sep 25 2024 Thorsten Kukuk
- Add /srv/www directories to filelist [bsc#1231027]
* Tue Mar 17 2020 Paolo Stivanin - Update to new upstream release 1.2.3
* Offer lzip and zstd as compression methods through the webui.
* ui-tree: allow per repository override for enable-blame.- Bump git to latest upstream release 2.25.1
* Mon May 20 2019 Christophe Giboudeaux - Add the missing zlib requirement.
* Thu Dec 06 2018 Jan Engelhardt - Create a /var/cache/cgit [boo#1116567]- Update bundled git to 2.18.1- Remove cgit-optflags.diff
* Sun Aug 05 2018 jengelhAATTinai.de- Update to new upstream release 1.2.1
* fixes CVE-2018-14912 directory traversal vulnerability [boo#1103799]
* syntax-highlighting: replace invalid unicode with \'?\'
* ui-repolist: properly sort by age
* ui-patch: fix crash when using path limit- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)
* Sat Feb 11 2017 jengelhAATTinai.de- Update bundled git to 2.11.1
* Thu Jan 19 2017 vsvecovaAATTsuse.com- Version bump to v1.1:
* For more information see complete changelog at https://git.zx2c4.com/cgit/log/- Add cgit-built-with-git-v2.11.0.patch
* Thu Jan 05 2017 vcizekAATTsuse.com- remove redundant gnu-crypto BuildRequires
* Mon Jun 13 2016 astiegerAATTsuse.com- cgit 1.0:
* Add repo.homepage/gitweb.homepage setting and homepage tab.
* Considerable internal cleanups.
* Show reverse paths in title bar so that browser tab shows filename.
* Add syntax highlighting to md2html.
* Allow redirects even when caching is turned on.
* Fix empty PATH_INFO on redirect.
* Better HTML5 compliance.
* Simplified decorations.
* Show repo\'s root directory in plain view.
* Date printing and timezone normalization.
* Unicode issues in syntax highlighting.
* Account for caches with empty key.
* Use size_t for all lengths.
* More gracefully deal with unparsable commits.- with git 2.8.3- the following patches are now included upstream git 2.8.3: 0012-http-push-stop-using-name_path.patch 0013-show_object_with_name-simplify-by-using-path_name.patch 0014-list-objects-convert-name_path-to-a-strbuf.patch 0015-list-objects-drop-name_path-entirely.patch 0016-list-objects-pass-full-pathname-to-callbacks.patch
* Wed Mar 16 2016 tiwaiAATTsuse.de- Fix remote code execution via buffer overflow (CVE-2016-2315, CVE-2016-2324, bsc#971328): 0012-http-push-stop-using-name_path.patch 0013-show_object_with_name-simplify-by-using-path_name.patch 0014-list-objects-convert-name_path-to-a-strbuf.patch 0015-list-objects-drop-name_path-entirely.patch 0016-list-objects-pass-full-pathname-to-callbacks.patch
* Thu Jan 14 2016 jengelhAATTinai.de- Update to new upstream release 0.12
* Show remote refs in branch switcher combobox.
* Add sample post-receive hook in /contrib.
* Add HTML escaping to filters.
* Add \"enable-follow-links\" option to have the log UI behave the same way as \"git log --follow\", as well as updating the diffand commit UIs.
* Errors are now cached under the dynamic-ttl setting.
* Simplified filters and converters.
* Add \"enable-html-serving\" to turn on serving of HTML mimetypes from the /plain handler, to prevent against stored XSS.
* /blob no longer takes a mimetype query string parameter.- Resolve: Reflected Cross Site Scripting & Header Injection in Mimetype Query String; Stored Cross Site Scripting & Header Injection in Filename Parameter; Stored Cross Site Scripting in Git Repo Files; Integer Overflow resulting in Buffer Overflow [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]- Update bundled git tarball to 2.7.0 (build-time requirement)
* Tue Oct 06 2015 jengelhAATTinai.de- Update bundled git tarball to 2.6.1 [bnc#948969]
* Thu Sep 24 2015 jengelhAATTinai.de- Update bundled git tarball to 2.5.3
* Tue Jun 09 2015 jengelhAATTinai.de- Update bundled git tarball to 2.4.3
* Mon May 04 2015 jengelhAATTinai.de- Update to new upstream release 0.11.2
* addition of a Lua scripting engine
* fine-grained authentication support through the new Lua scripting system
* support for the \"rawdiff\" command was added
* sendfile() is now used when available (Linux systems) instead of a loop of read() and write(). This should significantly increase performance for high volume sites which make heavy use of the caching feature, as it saves copies to and from user-space.
* Caching granularity is now improved with the introduction of the cache-snapshot-ttl option, which allows configuration of the ttl for tarball and zip snapshots of repositories.
* When filtering in the index, make the sorting links point to the same filtered page of results
* Take into account leading slashes when comptuing links- Avoid double %setup (messes with quilt). Simplify filelist. %doc for man is implicit.- Drop cgit-git-1.7.6_build_fix.patch, cgit-fix-print-tree.diff, cgit-fix-more-read_tree_recursive-invocations.diff, cgit-CVE-2013-2117-disallow-directory-traversal.patch- Add signature for the git core tarball.
* Mon Nov 24 2014 guillaumeAATTopensuse.org- Fix css and logo path in cgitrc file (replace /git by /cgit)
