| Commit message (Expand) | Author | Age |
* | Document the security fix soon to be released in 3.20170111 | Simon McVittie | 2017-01-11 |
* | remove: make it clearer that repeated page parameter is OK here | Simon McVittie | 2017-01-11 |
* | CGI, attachment, passwordauth: harden against repeated parameters | Simon McVittie | 2017-01-11 |
* | passwordauth: avoid userinfo forgery via repeated email parameter | Simon McVittie | 2017-01-11 |
* | t/passwordauth.t: new automated test for passwordauth | Simon McVittie | 2017-01-11 |
* | passwordauth: prevent authentication bypass via multiple name parameters | Simon McVittie | 2017-01-11 |
* | 3.20170110 | Simon McVittie | 2017-01-10 |
* | Sset libmagickcore-6.q16-3-extra as preferred build-dependency | Simon McVittie | 2017-01-10 |
* | d/ikiwiki.doc-base: register the documentation with doc-base | Simon McVittie | 2017-01-10 |
* | d/ikiwiki.lintian-overrides: silence false positive spelling warning for Moin... | Simon McVittie | 2017-01-10 |
* | d/ikiwiki.lintian-overrides: override script-not-executable warnings | Simon McVittie | 2017-01-10 |
* | docwiki.setup: exclude TourBusStop from offline documentation | Simon McVittie | 2017-01-10 |
* | lintian: Override obsolete-url-in-packaging for OpenID Selector | Simon McVittie | 2017-01-10 |
* | d/copyright: re-order to put more specific stanzas later, to get the intended... | Simon McVittie | 2017-01-10 |
* | Set package format to 3.0 (native) | Simon McVittie | 2017-01-10 |
* | Update changelog | Simon McVittie | 2017-01-09 |
* | check_canchange: report invalid filenames as intended | Simon McVittie | 2017-01-09 |
* | news: Use Debian security tracker instead of MITRE for CVE references | Simon McVittie | 2017-01-09 |
* | shortcuts: Use security-tracker.debian.org for [[!debcve]] | Simon McVittie | 2017-01-09 |
* | git: don't redundantly pass "--" to git_sha1 | Simon McVittie | 2017-01-09 |
* | git: use parameters, not global state, to swap working directory | Simon McVittie | 2017-01-09 |
* | Revert "git: Turn $git_dir into a stack" | Simon McVittie | 2017-01-09 |
* | git-cgi.t: when committing directly, make sure we have a valid author | Simon McVittie | 2017-01-09 |
* | git: do not mix in_git_dir with eval{} | Simon McVittie | 2017-01-09 |
* | Use rel=nofollow microformat for comment authors | Simon McVittie | 2017-01-09 |
* | Use rel=nofollow microformat for dynamic (CGI-related) URLs | Simon McVittie | 2017-01-09 |
* | t/git-cgi.t: fix race condition | Simon McVittie | 2017-01-09 |
* | Enquote $background_command as surely intended. | Amitai Schleier | 2017-01-02 |
* | add debian security tracker | https://anarc.at/openid/ | 2016-12-30 |
* | Merge remote-tracking branch 'origin/master' | Simon McVittie | 2016-12-29 |
|\ |
|
| * | add anchors for use in advisory to oss-security | smcv | 2016-12-29 |
* | | 3.20161229.1 | Simon McVittie | 2016-12-29 |
* | | git: Do not disable commit hook for temporary working tree | Simon McVittie | 2016-12-29 |
* | | git: Attribute reverts to the user doing the revert, not the wiki itself | Simon McVittie | 2016-12-29 |
|/ |
|
* | Clarify which versions of ikiwiki fixed CVE-2016-9645, -9646 | Simon McVittie | 2016-12-29 |
* | 3.20161229 | Simon McVittie | 2016-12-29 |
* | Add CVE references for CVE-2016-9646, CVE-2016-9645 | Simon McVittie | 2016-12-29 |
* | Prune git remotes that are unreachable or unresponsive | Simon McVittie | 2016-12-29 |
* | git: Add test coverage for reverting attachments | Simon McVittie | 2016-12-28 |
* | git: write proposed attachment to temp file without going via system() | Simon McVittie | 2016-12-28 |
* | git: change calling convention of safe_git to have named arguments | Simon McVittie | 2016-12-28 |
* | git: Do the revert operation in a secondary working tree | Simon McVittie | 2016-12-28 |
* | git: Turn $git_dir into a stack | Simon McVittie | 2016-12-28 |
* | Add automated test for using the CGI with git, including CVE-2016-10026 | Simon McVittie | 2016-12-28 |
* | Try revert operations (on a branch) before approving them | Simon McVittie | 2016-12-28 |
* | Revert "Tell `git revert` not to follow renames" | Simon McVittie | 2016-12-28 |
* | Force CGI::FormBuilder->field to scalar context where necessary | Simon McVittie | 2016-12-28 |
* | git: do not fail to commit if committer is anonymous | Simon McVittie | 2016-12-28 |
* | git: don't issue a warning if rcsinfo is undefined | Simon McVittie | 2016-12-28 |
* | git_revert test: reinstate ikiwiki.setup, and make it work uninstalled | Simon McVittie | 2016-12-28 |