- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)

• Files Changed
• Browse Source

fix changelog

• Files Changed
• Browse Source

Hi,

on OpenSUSE < 12.2, xz is needed in BuildRequire.

• Files Changed
• Browse Source

- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff

• Files Changed
• Browse Source

- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)

• Files Changed
• Browse Source

- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)

• Files Changed
• Browse Source

patch license to follow spdx.org standard

• Files Changed
• Browse Source

Add cgit-fix-more-read_tree_recursive.diff, this time with 'Changed'-entry.

• Files Changed
• Browse Source

Add changes entry for recent patch addition.

• Files Changed
• Browse Source

The cgit build fix with respect to git-1.7.6 is incomplete: in the file ui-tree.c ls_tree() has been patched to use pathspec when invoking read_tree_recursive(), but cgit_print_tree() has not been touched.

The resulting problem can be seen when browsing the tree of a cgit repository: when you "drill down" into subfolders, parts of the parent folder's contents will appear in the listing.

This patch adjusts cgit_print_tree() accordingly, which fixes the problem.

• Files Changed
• Browse Source

- split from OBS git repo to an individual repo (since cgit-0.9
  doesn't build with git-1.7.7)
- merged fixes in git repo back to cgit repo

• Files Changed
• Browse Source

- split from OBS git repo to an individual repo
- merged fixes in git repo back
- updated to git 1.7.6.4

- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6

- updated to git 1.7.6: see git changelog for more details

- updated to git 1.7.5.4: see git changelog for more details

- Fix incompatibilies with git 1.7.5.x to build cgit again

- Do not buildrequire git, the package builds it's own git and the
  buildrequires line only makes backporting harder.

- updated git 1.7.5.3:
  See git changelog for more details

- updated to git 1.7.4.2:
  documentation updates, small bug fixes;
  see included Documentation/RelNotes/1.7.4.2.txt
- updated to cgit 0.9:
  major updates; using git-1.7.4.x

- updated to git 1.7.3.3:
  In addition to the usual fixes, this release also includes
  support for the new "add.ignoreErrors" name given to the
  existing "add.ignore-errors" configuration variable.

• Files Changed
• Browse Source

- updated to cgit 0.9.0.2
- fixed potential XSS vulnerability in rename hint
- fixed a segfault with git 1.7.6

• Files Changed
• Browse Source

auto commit by copy to link target

• Files Changed
• Browse Source

Copy from home:gladiac:branches:devel:tools:scm/cgit via accept of submit request 45913 revision 2.
Request was accepted with message:
ok

• Files Changed
• Browse Source

auto commit by copy to link target

• Files Changed
• Browse Source

Copy from home:gladiac:branches:devel:tools:scm/cgit via accept of submit request 45905 revision 2.
Request was accepted with message:
ok

• Files Changed
• Browse Source

Copy from home:poletti_marco/cgit via accept of submit request 42396 revision 1.
Request was accepted with message:
Reviewed ok

• Browse Source