| 2019-02-26 |
Simon McVittie | Release to stretch-security
|
commit | commitdiff | tree |
| 2019-02-26 |
Simon McVittie | doc: Document security issues involving LWP::UserAgent
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2019-02-26 |
Simon McVittie | useragent: Automatically choose whether to use LWPx...
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2019-02-26 |
Simon McVittie | useragent: Don't allow non-HTTP protocols to be used
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2019-02-26 |
Simon McVittie | useragent: Raise an exception if the LWP module can...
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Release 3.20170111
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Document the security fix soon to be released in 3...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | remove: make it clearer that repeated page parameter...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | CGI, attachment, passwordauth: harden against repeated...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | passwordauth: avoid userinfo forgery via repeated email...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | t/passwordauth.t: new automated test for passwordauth
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | passwordauth: prevent authentication bypass via multiple...
|
commit | commitdiff | tree |
| 2017-01-10 |
Simon McVittie | 3.20170110
|
commit | commitdiff | tree |
| 2017-01-10 |
Simon McVittie | Sset libmagickcore-6.q16-3-extra as preferred build...
|
commit | commitdiff | tree |
| 2017-01-10 |
Simon McVittie | d/ikiwiki.doc-base: register the documentation with...
|
commit | commitdiff | tree |
| 2017-01-10 |
Simon McVittie | d/ikiwiki.lintian-overrides: silence false positive...
|
commit | commitdiff | tree |
| 2017-01-10 |
Simon McVittie | d/ikiwiki.lintian-overrides: override script-not-executable...
|
commit | commitdiff | tree |
| 2017-01-10 |
Simon McVittie | docwiki.setup: exclude TourBusStop from offline documentation
|
commit | commitdiff | tree |
| 2017-01-10 |
Simon McVittie | lintian: Override obsolete-url-in-packaging for OpenID...
|
commit | commitdiff | tree |
| 2017-01-10 |
Simon McVittie | d/copyright: re-order to put more specific stanzas...
|
commit | commitdiff | tree |
| 2017-01-10 |
Simon McVittie | Set package format to 3.0 (native)
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | Update changelog
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | check_canchange: report invalid filenames as intended
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | news: Use Debian security tracker instead of MITRE...
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | shortcuts: Use security-tracker.debian.org for [[!debcve]]
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | git: don't redundantly pass "--" to git_sha1
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | git: use parameters, not global state, to swap working...
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | Revert "git: Turn $git_dir into a stack"
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | git-cgi.t: when committing directly, make sure we have...
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | git: do not mix in_git_dir with eval{}
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | Use rel=nofollow microformat for comment authors
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | Use rel=nofollow microformat for dynamic (CGI-related...
|
commit | commitdiff | tree |
| 2017-01-09 |
Simon McVittie | t/git-cgi.t: fix race condition
|
commit | commitdiff | tree |
| 2016-12-29 |
Simon McVittie | Merge remote-tracking branch 'origin/master'
|
commit | commitdiff | tree |
| 2016-12-29 |
Simon McVittie | 3.20161229.1
|
commit | commitdiff | tree |
| 2016-12-29 |
Simon McVittie | git: Do not disable commit hook for temporary working...
|
commit | commitdiff | tree |
| 2016-12-29 |
Simon McVittie | git: Attribute reverts to the user doing the revert...
|
commit | commitdiff | tree |
| 2016-12-29 |
Simon McVittie | Clarify which versions of ikiwiki fixed CVE-2016-9645...
|
commit | commitdiff | tree |
| 2016-12-29 |
Simon McVittie | 3.20161229
|
commit | commitdiff | tree |
| 2016-12-29 |
Simon McVittie | Add CVE references for CVE-2016-9646, CVE-2016-9645
|
commit | commitdiff | tree |
| 2016-12-29 |
Simon McVittie | Prune git remotes that are unreachable or unresponsive
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | git: Add test coverage for reverting attachments
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | git: write proposed attachment to temp file without...
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | git: change calling convention of safe_git to have...
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | git: Do the revert operation in a secondary working...
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | git: Turn $git_dir into a stack
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | Add automated test for using the CGI with git, including...
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | Try revert operations (on a branch) before approving...
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | Revert "Tell `git revert` not to follow renames"
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | Force CGI::FormBuilder->field to scalar context where...
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | git: do not fail to commit if committer is anonymous
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | git: don't issue a warning if rcsinfo is undefined
|
commit | commitdiff | tree |
| 2016-12-28 |
Simon McVittie | git_revert test: reinstate ikiwiki.setup, and make...
|
commit | commitdiff | tree |
| 2016-12-21 |
Simon McVittie | Add CVE references for CVE-2016-10026
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | Announce 3.20161219
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | Release 3.20161219
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | changelog
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | Update changelog
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | Restrict CSS matches on .header to not affect <tr>
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | List security contacts
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | Add a manual test for reverting git commits
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | Tell `git revert` not to follow renames
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | cgitemplate: actually remove dead code
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2016-12-19 |
Simon McVittie | cgitemplate: remove dead code
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2016-09-06 |
Simon McVittie | Belatedly announce yesterday's release
|
commit | commitdiff | tree |
| 2016-09-05 |
Simon McVittie | 3.20160905
|
commit | commitdiff | tree |
| 2016-09-03 |
Simon McVittie | pm_filter: use \Q...\E to escape all possible strings...
|
commit | commitdiff | tree |
| 2016-09-03 |
Simon McVittie | Use git log --no-renames for recentchanges
|
commit | commitdiff | tree |
| 2016-08-22 |
Simon McVittie | Revert spam
|
commit | commitdiff | tree |
| 2016-08-22 |
Simon McVittie | Revert spam. Consider yourself banned.
|
commit | commitdiff | tree |
| 2016-07-28 |
Simon McVittie | Announce 3.20160728
|
commit | commitdiff | tree |
| 2016-07-28 |
Simon McVittie | 3.20160728
|
commit | commitdiff | tree |
| 2016-07-28 |
Simon McVittie | Standards-Version: 3.9.8 (no changes required)
|
commit | commitdiff | tree |
| 2016-07-28 |
Simon McVittie | Revert test commit to sandbox/discussion
|
commit | commitdiff | tree |
| 2016-07-28 |
Simon McVittie | Exclude working directory from library path (CVE-2016...
|
commit | commitdiff | tree |
| 2016-05-17 |
Simon McVittie | Revert vandalism
|
commit | commitdiff | tree |
| 2016-05-11 |
Simon McVittie | Wrapper: allocate new environment dynamically
|
commit | commitdiff | tree |
| 2016-05-09 |
Simon McVittie | 3.20160509
|
commit | commitdiff | tree |
| 2016-05-09 |
Simon McVittie | Reference CVE-2016-4561 in 3.20160506 changelog
|
commit | commitdiff | tree |
| 2016-05-09 |
Simon McVittie | img test: exercise upper-case extensions for image...
|
commit | commitdiff | tree |
| 2016-05-09 |
Simon McVittie | Remove spurious changelog entry
|
commit | commitdiff | tree |
| 2016-05-07 |
Simon McVittie | img: make img_allowed_formats case-insensitive
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | inline: expand show=N backwards compatibility to negative N
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | Add CVE reference
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | use intended filename
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | Announce 3.20160506
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | Merge remote-tracking branch 'origin/master'
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | 3.20160506
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | Exclude users/* from the HTML documentation
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | Do not recommend mimetype(image/*)
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | Document the security fixes in this release
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | img: Add back support for SVG images, bypassing ImageMagick...
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img: check magic number before giving common formats...
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img: restrict to JPEG, PNG and GIF images by default
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img: force common Web formats to be interpreted according...
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | HTML-escape error messages (OVE-20160505-0012)
|
commit | commitdiff | tree |
| 2016-01-22 |
Simon McVittie | d/control: add Vcs-Browser
|
commit | commitdiff | tree |
| 2016-01-22 |
Simon McVittie | d/control: use https for Homepage
|
commit | commitdiff | tree |
| 2016-01-21 |
Simon McVittie | Announce version 3.20160121
|
commit | commitdiff | tree |
| 2016-01-21 |
Simon McVittie | 3.20160121
|
commit | commitdiff | tree |
| next |