Hello community, here is the log from the commit of package fossil.13784 for openSUSE:Leap:15.1:Update checked in at 2020-09-20 00:23:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.1:Update/fossil.13784 (Old) and /work/SRC/openSUSE:Leap:15.1:Update/.fossil.13784.new.4249 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "fossil.13784" Sun Sep 20 00:23:25 2020 rev:1 rq:833849 version:2.12.1 Changes: -------- New Changes file: --- /dev/null 2020-09-10 00:27:47.435250138 +0200 +++ /work/SRC/openSUSE:Leap:15.1:Update/.fossil.13784.new.4249/fossil.changes 2020-09-20 00:23:26.370492052 +0200 @@ -0,0 +1,721 @@ +------------------------------------------------------------------- +Wed Aug 26 13:53:19 UTC 2020 - Reinhard Max <[email protected]> + +- fossil 2.12.1: + * CVE-2020-24614: Remote authenticated users with check-in or + administrative privileges could have executed arbitrary code + [boo#1175760] + * Security fix in the "fossil git export" command. New + "safety-net" features were added to prevent similar problems + in the future. + * Enhancements to the graph display for cases when there are + many cherry-pick merges into a single check-in. Example + * Enhance the fossil open command with the new --workdir option + and the ability to accept a URL as the repository name, + causing the remote repository to be cloned automatically. Do + not allow "fossil open" to open in a non-empty working + directory unless the --keep option or the new --force option + is used. + * Enhance the markdown formatter to more closely follow the + CommonMark specification with regard to text + highlighting. Underscores in the middle of identifiers (ex: + fossil_printf()) no longer need to be escaped. + * The markdown-to-html translator can prevent unsafe HTML (for + example: <script>) on user-contributed pages like forum and + tickets and wiki. The admin can adjust this behavior using the + safe-html setting on the Admin/Wiki page. The default is to + disallow unsafe HTML everywhere. + * Added the "collapse" and "expand" capability for long forum + posts. + * The "fossil remote" command now has options for specifying + multiple persistent remotes with symbolic names. Currently + only one remote can be used at a time, but that might change + in the future. + * Add the "Remember me?" checkbox on the login page. Use a + session cookie for the login if it is not checked. + * Added the experimental "fossil hook" command for managing + "hook scripts" that run before checkin or after a push. + * Enhance the fossil revert command so that it is able to revert + all files beneath a directory. + * Add the fossil bisect skip command. + * Add the fossil backup command. + * Enhance fossil bisect ui so that it shows all unchecked + check-ins in between the innermost "good" and "bad" check-ins. + * Added the --reset flag to the "fossil add", "fossil rm", and + "fossil addremove" commands. + * Added the "--min N" and "--logfile FILENAME" flags to the + backoffice command, as well as other enhancements to make the + backoffice command a viable replacement for automatic + backoffice. Other incremental backoffice improvements. + * Added the /fileedit page, which allows editing of text files + online. Requires explicit activation by a setup user. + * Translate built-in help text into HTML for display on web + pages. + * On the /timeline webpage, the combination of query parameters + "p=CHECKIN" and "bt=ANCESTOR" draws all ancestors of CHECKIN + going back to ANCESTOR. + * Update the built-in SQLite so that the "fossil sql" command + supports new output modes ".mode box" and ".mode json". + * Add the "obscure()" SQL function to the "fossil sql" command. + * Added virtual tables "helptext" and "builtin" to the "fossil + sql" command, providing access to the dispatch table including + all help text, and the builtin data files, respectively. + * Delta compression is now applied to forum edits. + * The wiki editor has been modernized and is now Ajax-based. + +- Remove fossil-2.11-reproducible.patch: Upstream integrated the + patch and improved it to also recognize SOURCE_DATE_EPOCH. +- Remove fossil-2.7-remove_date_time.patch: OBS now sets + SOURCE_DATE_EPOCH and gcc recognizes it, so the removal of + __DATE__ and __TIME__ is not needed anymore. +- Package the fossil.1 manual page. + +------------------------------------------------------------------- +Sat Jul 4 16:48:06 UTC 2020 - Andreas Stieger <[email protected]> + +- fossil 2.11.1: + * Make the "fossil git export" command more restrictive about + characters that it allows in the tag names + +------------------------------------------------------------------- +Thu Jun 11 19:27:25 UTC 2020 - Bernhard Wiedemann <[email protected]> + +- Add fossil-2.11-reproducible.patch to override build date (boo#1047218) + +------------------------------------------------------------------- +Wed May 27 07:31:42 UTC 2020 - Andreas Stieger <[email protected]> + +- fossil 2.11: + * Support Markdown in the default ticket configuration + * Timestamp strings in object names can now omit punctation + * Enhance backlink processing so that it works with Markdown- + formatted tickets and so that it works for wiki pages + fossil rebuild is needed to take full advantage of this fix + * Many improvements to the forum and especially email notification + of forum posts + * Minimum length of a self-registered user ID increased from 3 to 6 + characters + * Rework the fossil grep command to be more useful + * Expose the redirect-to-https setting to the settings command + * Most commands now support the Unix-conventional "--" flag to + treat all following arguments as filenames instead of flags + * Add the mimetypes config setting + * security harening against possibly tampered database schemas + * Now sends the Content-Security-Policy header + * Stop using the IP address as part of the login cookie + * many web UI and CLI improvements, documentation updates + +------------------------------------------------------------------- +Sat Oct 5 11:16:57 UTC 2019 - Andreas Stieger <[email protected]> + +- fossil 2.10: + * Add support for CGI-based Server Extensions + * UI improvement and extensions + * Change the default hash policy to SHA3 + * Performance optimizations + +------------------------------------------------------------------- +Sun Aug 4 09:23:16 UTC 2019 - Andreas Stieger <[email protected]> + +- update to 2.9: + * Add the fossil git export command + * Web UI layout and behavior improvements + * Add the fossil touch command, and the --setmtime option on the + fossil open and fossil update commands + * Add the /secureraw page that requires the complete SHA1 or SHA3 + hash, not just a prefix, before it will deliver content + * Improvement to clone and sync behavior + * many other bug fixes and improvements +- includes changes from 2.8: + * Show cherry-pick merges as dotted lines on the timeline graph. + The "fossil rebuild" command must be run to create and populate + the new "cherrypick" table in the repository in order for this + feature to operate. + * Web UI improvements + * Wiki setup is now at /setup_wiki + * Provide the ability to redirect all HTTP pages to HTTPS + * Add the backoffice-disable setting to completely disable the + backoffice feature + +------------------------------------------------------------------- +Thu Sep 27 09:17:44 UTC 2018 - [email protected] + +- update to 2.7: + * New email alerts feature + * New discussion forum feature + * UI improvements for built-in skins on small screens + * Use of Content Security Policy (CSP) in built-in skins +- includes changes from 2.6: + * Add the new "Classic" timeline viewing mode + * Add support HTTP cache control mechanisms + * Improvements to various pages and functions + * Additional defenses against web-based attacks +- requires SQLite >= 3.25.0 +- rebase fossil-1.37-remove_date_time.patch to + fossil-2.7-remove_date_time.patch + +------------------------------------------------------------------- +Mon Feb 26 15:18:04 UTC 2018 - [email protected] + +- update to 2.5: + * UI updates + * display ettings persist across pages + * improve responsiveness fo server process + * Support for SQL Archives as a download option + +------------------------------------------------------------------- +Thu Dec 7 13:09:48 UTC 2017 - [email protected] + +- Use bcond for deciding between system and builtin sqlite. +- Update to version 2.4: + * New feature: URL Aliases. URL Aliases allow an administrator to + define their own URLs on the web interface that are rewritten to + built-in URLs with specific parameters. Create and configure + URL Aliases using the /Setup/URL_Aliases menu option in the + web interface. + * Add tech-note search capability. + * Add the -r|--revision and -o|--origin options to the annotate + command. + * Add the origin= query parameter to the /annotate webpage. + * The fossil annotate command and the /annotate web page go + backwards in time as far as can be computed in 30 milliseconds + by default, rather than stopping after 20 steps. The new + limit= query parameter or the --limit command-line option can + be used to alter this timeout. + * Provide separate on-line help screens for each setting. + * Back out support for the --no-dir-symlinks option + * Remove support from the legacy configuration sync + protocol. The only way now to do a configuration push or pull + is to use the new protocol that was added in 2011. + * Add the from= and to= query parameters to /fdiff in order to + get a diff of two files in the same check-in. + * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to + prevent an attack whereby the attacker convinces a victim to + run a "clone" with a dodgy URL and thereby gains access to + their system + * Provide a checkbox that will temporarily disable all ad-units. + * Improvements to the /stat page ++++ 524 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:Leap:15.1:Update/.fossil.13784.new.4249/fossil.changes New: ---- fossil-src-2.12.1.tar.gz fossil.changes fossil.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fossil.spec ++++++ # # spec file for package fossil # # Copyright (c) 2020 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via https://bugs.opensuse.org/ # %if 0%{?suse_version} > 1500 %bcond_without system_sqlite %else %bcond_with system_sqlite %endif Name: fossil Version: 2.12.1 Release: 0 Summary: Distributed software configuration management License: BSD-2-Clause Group: Development/Tools/Version Control URL: https://www.fossil-scm.org/ Source: https://www.fossil-scm.org/index.html/uv/%{name}-src-%{version}.tar.gz BuildRequires: fuse-devel BuildRequires: gcc BuildRequires: openssl-devel BuildRequires: tcl BuildRequires: zlib-devel %if %{with system_sqlite} BuildRequires: sqlite3-devel >= 3.25.0 %endif %description Fossil is a distributed software configuration management system with these features: * integrated bug tracking and wiki * built-in web-interface * uses HTTP, with proxy support * everything is in a single executable and CGI-enabled * sqlite-backed database %prep %setup -q # test package version and source version match grep -qFx %{version} VERSION %build export CFLAGS="%{optflags}" # FIXME: you should use the %%configure macro ./configure \ --prefix=%{_prefix} \ --with-openssl=auto \ %if %{with system_sqlite} --disable-internal-sqlite %endif make %{?_smp_mflags} %install %make_install install -D -m 644 -t %{buildroot}%{_mandir}/man1 fossil.1 %files %license COPYRIGHT-BSD2.txt %{_bindir}/fossil %{_mandir}/*/* %changelog
