| 2017-01-11 |
Simon McVittie | changelog: Reference newly allocated CVE-2017-0356
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Merge branch 'debian-jessie' into debian-jessie-security
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Update changelog for installed-tests support
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | debian/tests/control: set INSTALLED_TESTS=1 here
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | t/html.t: skip if running installed
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Run autopkgtest tests using autodep8 and the pkg-perl...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | d/control: add enough build-dependencies to run all...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Update changelog for backported git plugin and test
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: don't redundantly pass "--" to git_sha1
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: use parameters, not global state, to swap working...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Revert "git: Turn $git_dir into a stack"
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git-cgi.t: when committing directly, make sure we have...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: do not mix in_git_dir with eval{}
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | t/git-cgi.t: fix race condition
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: Do not disable commit hook for temporary working...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: Attribute reverts to the user doing the revert...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: Add test coverage for reverting attachments
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: write proposed attachment to temp file without...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: change calling convention of safe_git to have...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: Do the revert operation in a secondary working...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: Turn $git_dir into a stack
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Add automated test for using the CGI with git, including...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Try revert operations (on a branch) before approving...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: do not fail to commit if committer is anonymous
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: don't issue a warning if rcsinfo is undefined
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Use git log --no-renames for recentchanges
|
commit | commitdiff | tree |
| 2017-01-11 |
Florian Wagner | Correctly handle filenames starting with a dash in...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | ensure_committer: don't do anything if we have the...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Don't memoize ensure_committer
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | git: if no committer identity is known, set it to ...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Revert "Tell `git revert` not to follow renames (CVE...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Tell `git revert` not to follow renames (CVE-2016-10026)
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Update changelog for img backport
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | img test: exercise upper-case extensions for image...
|
commit | commitdiff | tree |
| 2017-01-11 |
Amitai Schlair | Detect image type from .JPG just like .jpg (etc.).
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Update changelog
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | CGI, attachment, passwordauth: harden against repeated...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Force CGI::FormBuilder->field to scalar context where...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | passwordauth: avoid userinfo forgery via repeated email...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | t/passwordauth.t: new automated test for passwordauth
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | passwordauth: prevent authentication bypass via multiple...
|
commit | commitdiff | tree |
| 2017-01-11 |
Simon McVittie | Reference CVE-2016-4561 in 3.20141016.3 changelog
|
commit | commitdiff | tree |
| 2016-12-23 |
Simon McVittie | Update changelog
|
commit | commitdiff | tree |
| 2016-12-23 |
Simon McVittie | Tell `git revert` not to follow renames (CVE-2016-10026)
Signed-off-by: Simon McVittie <smcv@debian.org>
|
commit | commitdiff | tree |
| 2016-05-09 |
Simon McVittie | Update changelog
|
commit | commitdiff | tree |
| 2016-05-09 |
Simon McVittie | Reference CVE-2016-4561 in 3.20141016.3 changelog
|
commit | commitdiff | tree |
| 2016-05-09 |
Simon McVittie | img test: exercise upper-case extensions for image...
|
commit | commitdiff | tree |
| 2016-05-09 |
Amitai Schlair | Detect image type from .JPG just like .jpg (etc.).
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | 3.20141016.3 (for jessie-security)
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | Do not recommend mimetype(image/*)
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | Document the security fixes in this release
|
commit | commitdiff | tree |
| 2016-05-06 |
smcv | add more details of CVE-2015-2793
|
commit | commitdiff | tree |
| 2016-05-06 |
Joey Hess | update for recent XSS
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | img: make img_allowed_formats case-insensitive
|
commit | commitdiff | tree |
| 2016-05-06 |
Joey Hess | update test suite for svg passthrough by img directive
|
commit | commitdiff | tree |
| 2016-05-06 |
Simon McVittie | img: Add back support for SVG images, bypassing ImageMagick...
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | Changelog
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img: check magic number before giving common formats...
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img: restrict to JPEG, PNG and GIF images by default
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | Update structure of img test from master
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img test: set old timestamp on source file that will...
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img test: skip testing PDFs if unsupported
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img test: use the right filenames when testing that...
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img: force common Web formats to be interpreted according...
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | HTML-escape error messages (OVE-20160505-0012)
|
commit | commitdiff | tree |
| 2016-05-05 |
Simon McVittie | img: stop ImageMagick trying to be clever if filenames...
|
commit | commitdiff | tree |
| 2015-03-29 |
Simon McVittie | Release 3.20141016.2
|
commit | commitdiff | tree |
| 2015-03-29 |
Joey Hess | Fix XSS in openid selector. Thanks, Raghav Bisht.
|
commit | commitdiff | tree |
| 2015-01-07 |
Simon McVittie | note that the two potential FTBFSs do not actually...
|
commit | commitdiff | tree |
| 2015-01-07 |
Simon McVittie | release candidate
|
commit | commitdiff | tree |
| 2015-01-07 |
Simon McVittie | Work around Debian #771047: use a non-blank SVG for...
|
commit | commitdiff | tree |
| 2015-01-07 |
Joey Hess | close debian bug I opened about blogspam
|
commit | commitdiff | tree |
| 2015-01-07 |
Amitai Schlair | blogspam uses JSON instead of RPC::XML now.
|
commit | commitdiff | tree |
| 2015-01-07 |
Amitai Schlair | Update blogspam to the 2.0 API.
|
commit | commitdiff | tree |
| 2015-01-07 |
Joey Hess | Set Debian package maintainer to Simon McVittie as...
|
commit | commitdiff | tree |
| 2015-01-07 |
Joey Hess | Add missing build-depends on libcgi-formbuilder-perl...
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | Merge remote-tracking branch 'refs/remotes/dgit/dgit...
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | release
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | debian: fix some wrong paths in the copyright file
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | debian: rename debian/link to debian/links so the intended...
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | close a bug
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | Drop unused python-support dependency
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | changelog so far
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | build-depend on libcgi-pm-perl too, for tests
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | Explicitly depend on CGI.pm, which is no longer in...
|
commit | commitdiff | tree |
| 2014-10-16 |
Amitai Schlair | IkiWiki::Plugin::openid: as a precaution, do not call...
|
commit | commitdiff | tree |
| 2014-10-16 |
Amitai Schlair | Call CGI->param_fetch instead of CGI->param in array...
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | Make sure we do not pass multiple CGI parameters in...
|
commit | commitdiff | tree |
| 2014-10-16 |
Simon McVittie | Replace PayPal and Flattr buttons with text links
|
commit | commitdiff | tree |
| 2014-10-12 |
Simon McVittie | Do not pass ignored sid parameter to checksessionexpiry
|
commit | commitdiff | tree |
| 2014-10-12 |
Simon McVittie | comments: don't log remote IP address for signed-in...
|
commit | commitdiff | tree |
| 2014-10-12 |
Simon McVittie | google search plugin: use https for the search
|
commit | commitdiff | tree |
| 2014-10-12 |
Simon McVittie | Set default User-Agent to something that doesn't mention...
|
commit | commitdiff | tree |
| 2014-10-05 |
Simon McVittie | more fixes
|
commit | commitdiff | tree |
| 2014-10-05 |
Simon McVittie | Document another fix
|
commit | commitdiff | tree |
| 2014-10-05 |
Simon McVittie | In html5 mode, generate a host- or protocol-relative...
|
commit | commitdiff | tree |
| 2014-10-05 |
Simon McVittie | Add reverse_proxy option which hard-codes cgiurl in...
|
commit | commitdiff | tree |
| 2014-10-05 |
Simon McVittie | Avoid mixed content when cgiurl is https but url is not
|
commit | commitdiff | tree |
| 2014-10-05 |
Simon McVittie | Use protocol-relative URIs if cgiurl and url differ...
|
commit | commitdiff | tree |
| 2014-10-05 |
Simon McVittie | Fix a test-case that actually just repeated the previous...
|
commit | commitdiff | tree |
| next |