aboutsummaryrefslogtreecommitdiff
path: root/debian
Commit message (Collapse)AuthorAge
* 3.20161229.1Simon McVittie2016-12-29
|
* git: Do not disable commit hook for temporary working treeSimon McVittie2016-12-29
| | | | | | | | We exclude .git/hooks from symlinking into the temporary working tree, which avoids the commit hook being run for the temporary branch anyway. This avoids the wiki not being updated if an orthogonal change is received in process A, while process B prepares a revert that is subsequently cancelled.
* git: Attribute reverts to the user doing the revert, not the wiki itselfSimon McVittie2016-12-29
|
* 3.20161229Simon McVittie2016-12-29
|
* Add CVE references for CVE-2016-9646, CVE-2016-9645Simon McVittie2016-12-29
| | | | Thanks to the Debian security team for allocating these.
* Add automated test for using the CGI with git, including CVE-2016-10026Simon McVittie2016-12-28
|
* Try revert operations (on a branch) before approving themSimon McVittie2016-12-28
| | | | | | | | | | | | | | | | | Otherwise, we have a time-of-check/time-of-use vulnerability: rcs_preprevert previously looked at what changed in the commit we are reverting, not at what would result from reverting it now. In particular, if some files were renamed since the commit we are reverting, a revert of changes that were within the designated subdirectory and allowed by check_canchange() might now affect files that are outside the designated subdirectory or disallowed by check_canchange(). It is not sufficient to disable rename detection, since git older than 2.8.0rc0 (in particular the version in Debian stable) silently accepts and ignores the relevant options. OVE-20161226-0002
* Force CGI::FormBuilder->field to scalar context where necessarySimon McVittie2016-12-28
| | | | | | | | | | | | | | | | | | | | | | | | | | CGI::FormBuilder->field has behaviour similar to the CGI.pm misfeature we avoided in f4ec7b0. Force it into scalar context where it is used in an argument list. This prevents two (relatively minor) commit metadata forgery vulnerabilities: * In the comments plugin, an attacker who was able to post a comment could give it a user-specified author and author-URL even if the wiki configuration did not allow for that, by crafting multiple values to other fields. * In the editpage plugin, an attacker who was able to edit a page could potentially forge commit authorship by crafting multiple values for the rcsinfo field. The remaining plugins changed in this commit appear to have been protected by use of explicit scalar prototypes for the called functions, but have been changed anyway to make them more obviously correct. In particular, checkpassword() in passwordauth has a known prototype, so an attacker cannot trick it into treating multiple values of the name field as being the username, password and field to check for. OVE-20161226-0001
* git: do not fail to commit if committer is anonymousSimon McVittie2016-12-28
|
* git: don't issue a warning if rcsinfo is undefinedSimon McVittie2016-12-28
| | | | | | The intention here seems to be that $prev may be undefined, and the only way that can legitimately happen is for $params{token} to be undefined too.
* git_revert test: reinstate ikiwiki.setup, and make it work uninstalledSimon McVittie2016-12-28
| | | | | | | | | | | | | | Previously it was relying on running with an installed ikiwiki and being able to copy in recentchanges.mdwn and wikiicons/ from the underlay in /usr. The underlay in ./underlays/basewiki can't be used (yet) because ikiwiki doesn't allow following symlinks, even from underlays. I'd like to make ikiwiki follow symlinks whose destinations can be verified to be safe (for example making it willing to expose /usr/share/javascript to the web, but not /etc/passwd), at least from underlays, but this is security-sensitive so I'm not going to rush into it.
* Add CVE references for CVE-2016-10026Simon McVittie2016-12-21
|
* Release 3.20161219Simon McVittie2016-12-19
|
* changelogSimon McVittie2016-12-19
|
* Update changelogSimon McVittie2016-12-19
|
* inline: Prevent creating a file named ".mdwn" when the postform is submitted ↵Joey Hess2016-09-21
| | | | with an empty title.
* Update my surname to its new legal spelling.Amitai Schlair2016-09-14
|
* 3.20160905Simon McVittie2016-09-05
|
* changelog for previous commitJoey Hess2016-08-03
| | | | Closes https://github.com/joeyh/ikiwiki/pull/19
* 3.20160728Simon McVittie2016-07-28
|
* Standards-Version: 3.9.8 (no changes required)Simon McVittie2016-07-28
|
* Wrapper: allocate new environment dynamicallySimon McVittie2016-05-11
| | | | | | | | | | | | | | Otherwise, if third-party plugins extend newenviron by more than 3 entries, we could overflow the array. It seems unlikely that any third-party plugin manipulates newenviron in practice, so this is mostly theoretical. Just in case, I have deliberately avoided using "i" as the variable name, so that any third-party plugin that was manipulating newenviron directly will now result in the wrapper failing to compile. I have not assumed that realloc(NULL, ...) works as an equivalent of malloc(...), in case there are still operating systems where that doesn't work.
* 3.20160509Simon McVittie2016-05-09
|
* Reference CVE-2016-4561 in 3.20160506 changelogSimon McVittie2016-05-09
|
* Remove spurious changelog entrySimon McVittie2016-05-09
| | | | | This change was new in 3.20141016.3, but was applied to the master branch several releases ago, so it is not new in 3.20160506.
* 3.20160506Simon McVittie2016-05-06
|
* Document the security fixes in this releaseSimon McVittie2016-05-06
|
* update test suite for svg passthrough by img directiveJoey Hess2016-05-06
| | | | | Remove build dependency libmagickcore-6.q16-2-extra which was only there for this test.
* img: Add back support for SVG images, bypassing ImageMagick and simply ↵Simon McVittie2016-05-06
| | | | | | | | | | | | | | passing the SVG through to the browser SVG scaling by img directives has subtly changed; where before size=wxh would preserve aspect ratio, this cannot be done when passing them through and so specifying both a width and height can change the SVG's aspect ratio. (This patch looks significantly more complex than it was, because a large block of code had to be indented.) [smcv: drop trailing whitespace, fix some spelling]
* changelog for smcv's security fixesJoey Hess2016-05-06
| | | | [smcv: omit a change that was already in 3.20160514]
* Changelog: process .md files iff created directly.Amitai Schlair2016-03-08
|
* loginselector: When only openid and emailauth are enabled, but passwordauth ↵Joey Hess2016-03-02
| | | | is not, avoid showing a "Other" box which opens an empty form.
* d/control: add Vcs-BrowserSimon McVittie2016-01-22
|
* d/control: use https for HomepageSimon McVittie2016-01-22
|
* 3.20160121Simon McVittie2016-01-21
|
* document recent inline and syslog fixesSimon McVittie2016-01-21
|
* changelog: sort user-visible changes before packaging and test fixesSimon McVittie2016-01-21
|
* img test: use the right filenames when testing that deletion occursSimon McVittie2016-01-19
| | | | | Also use a less misleading name for the sample SVG: it is no longer empty. Since commit 105f285a it has contained a blue square.
* img test: skip testing PDFs if unsupportedSimon McVittie2016-01-19
|
* Silence "used only once: possible typo" warnings for variables that are part ↵Simon McVittie2016-01-19
| | | | of modules' APIs
* d/control: Standards-Version: 3.9.6, no changes requiredSimon McVittie2016-01-19
|
* d/control: remove leading article from Description (lintian: ↵Simon McVittie2016-01-19
| | | | description-synopsis-starts-with-article)
* Change dependencies from transitional package perlmagick to ↵Simon McVittie2016-01-19
| | | | libimage-magick-perl (Closes: #789221)
* changelog: mention pagestats enhancementSimon McVittie2016-01-19
|
* Add license info to javascript underlaySimon McVittie2016-01-19
|
* underlays/javascript/* use ikiwiki's permissive licenseJoey Hess2015-12-01
| | | | I'm the sole author and copyright holder of these files.
* Merge remote-tracking branch 'smcv/ready/limit'Simon McVittie2015-11-30
|\
* | git: if no committer identity is known, set it to "IkiWiki <ikiwiki.info>" ↵Simon McVittie2015-11-30
| | | | | | | | | | | | | | in .git/config This resolves commit errors in versions of git that require a non-trivial committer identity.
* | debian/copyright: update for the rename of openid-selector to login-selectorSimon McVittie2015-11-30
| |
* | Add enough build-dependencies to run all tests, except for non-git VCSsSimon McVittie2015-11-30
| |
generated by cgit v1.2.3 (git 2.45.0) at 2024-11-28 15:07:14 +0000