Change log for cgit package in Ubuntu

cgit (1.2.3+git20221219.50.91f2590+git2.39.1-1) unstable; urgency=medium

  * New upstream snapshot (Closes: #1011482)
  * Refresh patches
  * Update git to v2.39.1
  * Update debian/copyright
  * Update debian/watch to mangle snapshot version
  * Bump debhelper compat level to 13
  * Bump standards version

 -- Peter Colberg <email address hidden>  Sun, 05 Feb 2023 15:39:02 -0500

Available diffs

• diff from 1.2.3+git2.25.1-2 to 1.2.3+git20221219.50.91f2590+git2.39.1-1 (8.0 MiB)

cgit (1.2.3+git2.25.1-2) unstable; urgency=medium

  * Do not mix output when running tests in parallel (Closes: #1019368)
  * Fix FTBFS on riscv64 (Closes: #1019369)
  * Bump standards version

 -- Peter Colberg <email address hidden>  Sat, 17 Sep 2022 18:19:33 -0400

Available diffs

• diff from 1.2.3+git2.25.1-1 to 1.2.3+git2.25.1-2 (1.3 KiB)

cgit (1.2.3+git2.25.1-1) unstable; urgency=medium

  [ Peter Colberg ]
  * Use https for copyright-format URL
  * New upstream release (Closes: #954745)
  * Run wrap-and-sort -ast
  * Add Build-Depends on lzip and zstd for tests
  * Bump debhelper compat level to 12
  * Bump Standards-Version to 4.5.0

  [ Helmut Grohne ]
  * Fix FTCBFS: Also pass cross flags to make install. (Closes: #953265)

 -- Peter Colberg <email address hidden>  Sun, 29 Mar 2020 23:24:26 -0400

Available diffs

• diff from 1.2.1+git2.18.0-1 to 1.2.3+git2.25.1-1 (5.1 MiB)

cgit (1.2.1+git2.18.0-1) unstable; urgency=medium

  * New upstream release (Closes: #915659)
  * Acknowledge NMU.
    Thanks to Salvatore Bonaccorso
  * Drop patches applied upstream
  * Set Maintainer address to <email address hidden>
  * Bump debhelper compat level to 11
  * Point Vcs-* urls to salsa.debian.org
  * Set Priority to optional as per policy 4.0.1
  * Remove get-orig-source rules target as per policy 4.1.4
  * Update debian/watch for multiple upstream tarballs
  * Verify PGP signature of upstream tarballs
  * Update debian/gbp.conf to import git component tarball
  * Update Standards-Version to 4.2.1
  * Set Rules-Requires-Root to binary-targets
  * Update debian/copyright

 -- Peter Colberg <email address hidden>  Sat, 08 Dec 2018 12:38:21 -0500

Available diffs

• diff from 1.1+git2.10.2-3.1 to 1.2.1+git2.18.0-1 (4.3 MiB)

cgit (1.1+git2.10.2-3ubuntu0.1) bionic-security; urgency=high

  * SECURITY UPDATE: Directory traversal vulnerability.
    - d/p/clone-fix-directory-traversal.patch:
      This fixes a directory traversal vulnerability in CGit
      before 1.2.1 when `enable-http-clone=1` is not turned off,
      as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.
    - CVE-2018-14912 (LP: #1787021)

 -- Unit 193 <email address hidden>  Tue, 14 Aug 2018 15:57:15 -0400

Available diffs

• diff from 1.1+git2.10.2-3build1 (in Ubuntu) to 1.1+git2.10.2-3ubuntu0.1 (1.4 KiB)

cgit (1.1+git2.10.2-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * clone: fix directory traversal (CVE-2018-14912) (Closes: #905382)

 -- Salvatore Bonaccorso <email address hidden>  Sat, 04 Aug 2018 12:27:48 +0200

Available diffs

• diff from 1.1+git2.10.2-3build1 (in Ubuntu) to 1.1+git2.10.2-3.1 (1.7 KiB)

cgit (1.1+git2.10.2-3build1) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <email address hidden>  Mon, 05 Feb 2018 16:48:53 +0000

Available diffs

• diff from 1.1+git2.10.2-3 (in Debian) to 1.1+git2.10.2-3build1 (561 bytes)

cgit (1.1+git2.10.2-3) unstable; urgency=medium

  * Build-depend on asciidoc-base | asciidoc.
    Thanks to Joseph Herlant (Closes: #850306)
  * Capitalise Lua in package description
  * Remove /var/cache/cgit on purge

 -- Peter Colberg <email address hidden>  Fri, 06 Jan 2017 00:08:21 -0500

Available diffs

• diff from 1.1+git2.10.2-2 to 1.1+git2.10.2-3 (841 bytes)

cgit (1.1+git2.10.2-2) unstable; urgency=medium

  * Link with -ldl on GNU Hurd

 -- Peter Colberg <email address hidden>  Fri, 25 Nov 2016 16:02:33 -0500

Available diffs

• diff from 1.1+git2.10.2-1 to 1.1+git2.10.2-2 (727 bytes)

cgit (1.1+git2.10.2-1) unstable; urgency=medium

  * New upstream release
  * Drop patches applied upstream
  * Add myself to debian/copyright
  * Fix crash when using path limit
  * Explicitly build-depend on zlib1g-dev
  * Bump debhelper compat level to 10
  * Drop redundant dh --parallel
  * Always fall back to text lexer for syntax highlighting.
    Thanks to Daniel Reichelt for the patch (Closes: #784621)

 -- Peter Colberg <email address hidden>  Thu, 24 Nov 2016 23:37:45 -0500

Available diffs

• diff from 1.0+git2.8.3-3 to 1.1+git2.10.2-1 (1.4 MiB)

cgit (1.0+git2.8.3-3) unstable; urgency=medium

  * Build depend on strace on Linux only
  * Remove unneeded build dependency on git
  * Remove unused lintian override for dh-apache2
  * Add debian/clean for generated files

 -- Peter Colberg <email address hidden>  Sun, 26 Jun 2016 14:03:46 -0400

Available diffs

• diff from 1.0+git2.8.3-2 to 1.0+git2.8.3-3 (729 bytes)

cgit (1.0+git2.8.3-2) unstable; urgency=medium

  * Build depend on strace for access validation tests
  * Enable parallel build
  * Remove unused dependency on ${python:Depends}
  * Suggest python3 instead of recommending python
  * Suggest python3-pygments | highlight for syntax highlighting
  * Suggest python3-docutils for rst2html
  * Suggest python3-markdown for md2html
  * Use python3 in md2html
  * Fix FTBFS on GNU/kFreeBSD by linking with -ldl

 -- Peter Colberg <email address hidden>  Sun, 19 Jun 2016 18:59:57 -0400

Available diffs

• diff from 1.0+git2.8.3-1 to 1.0+git2.8.3-2 (1.6 KiB)

cgit (1.0+git2.8.3-1) unstable; urgency=medium

  * New upstream release
    - Uses internally Git 2.8.3, which fixes CVE-2016-2315 (Closes: #827405)
  * Update patch headers to conform to DEP-3
  * Set Maintainer to Debian Cgit Packaging Team (Closes: #826764)
  * Add myself to Uploaders
  * Update Homepage to https
  * Add Vcs-Git and Vcs-Browser
  * Bump Standards-Version to 3.9.8
  * Update debian/copyright
  * Enable verbose compilation
  * Re-enable hardening flags
  * Revise debian/rules
  * Fix spelling
  * Add debian/watch
  * Add debian/gbp.conf
  * Add get-orig-source target to pack orig tarball

 -- Peter Colberg <email address hidden>  Wed, 15 Jun 2016 15:18:24 -0400

Available diffs

• diff from 0.12.0.git2.7.0-1 to 1.0+git2.8.3-1 (1009.3 KiB)

cgit (0.12.0.git2.7.0-1) unstable; urgency=medium

  * [4f86c67] Bump standards version
  * [762d2b1] don't use pedantic
  * New upstream version 0.12.0 with git 2.7.0
  * [9edaddc] Remove unused patch

 -- Alexander Wirt <email address hidden>  Tue, 01 Mar 2016 14:10:45 +0100

Available diffs

• diff from 0.11.2.git2.3.2-1.1 to 0.12.0.git2.7.0-1 (1.9 MiB)

cgit (0.11.2.git2.3.2-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * CVE-2016-1899: Reflected XSS and header injection in mimetype query
    string (Closes: #812411)
  * CVE-2016-1900: Stored cross site scripting and header injection in
    filename parameter (Closes: #812411)
  * CVE-2016-1901: Integer overflow resulting in buffer overflow
    (Closes: #812411)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 27 Jan 2016 20:54:12 +0100

Available diffs

• diff from 0.11.2.git2.3.2-1 to 0.11.2.git2.3.2-1.1 (2.5 KiB)

cgit (0.11.2.git2.3.2-1) unstable; urgency=medium

  * [7f8779f] Imported Upstream version 0.11.2.git2.3.2
    Closes: #781299
  * [3925a1b] Refresh patches
  * [bb17f35] Refresh git tree
  * [74e06fe] Bump standards version
  * [778309b] Use debians rst2html and hilight 3.x (Closes: #765806)
  * [33c654c] ship cache directory (Closes: #784608)

 -- Alexander Wirt <email address hidden>  Tue, 11 Aug 2015 10:24:03 +0200

Available diffs

• diff from 0.10.2.git2.0.1-3 to 0.11.2.git2.3.2-1 (1.3 MiB)

cgit (0.10.2.git2.0.1-3) unstable; urgency=medium


  * Initial upload

 -- Alexander Wirt <email address hidden>  Thu, 28 Aug 2014 16:26:24 -0700