[SECURITY] Fedora 11 Update: viewvc-1.1.3-1.fc11
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2009-13634
2009-12-24 20:17:10
--------------------------------------------------------------------------------
Name : viewvc
Product : Fedora 11
Version : 1.1.3
Release : 1.fc11
URL : http://www.viewvc.org/
Summary : Browser interface for CVS and SVN version control repositories
Description :
ViewVC is a browser interface for CVS and Subversion version control
repositories. It generates templatized HTML to present navigable directory,
revision, and change log listings. It can display specific versions of files
as well as diffs between those versions. Basically, ViewVC provides the bulk
of the report-like functionality you expect out of your version control tool,
but much more prettily than the average textual command-line program output.
--------------------------------------------------------------------------------
Update Information:
* security fix: add root listing support of per-root authz config * security
fix: query.py requires 'forbidden' authorizer (or none) in config * fix URL-
ification of truncated log messages (issue #3) * fix regexp input validation
(issue #426, #427, #440) * add support for configurable tab-to-spaces
conversion * fix not-a-sequence error in diff view * allow viewvc-install to
work when templates-contrib is absent * minor template improvements/corrections
* expose revision metadata in diff view (issue #431) * markup file/directory
item property URLs and email addresses (issue #434) * make ViewVC cross copies
in Subversion history by default * fix bug that caused standalone.py failure
under Python 1.5.2 (issue #442) * fix support for per-vhost overrides of
authorizer parameters (issue #411) * fix root name identification in query.py
interface
--------------------------------------------------------------------------------
ChangeLog:
* Wed Dec 23 2009 Bojan Smojver <bojan(a)rexursive.com> - 1.1.3-1
- bump up to 1.1.3
- drop patch for upstream issue #427
* Wed Sep 23 2009 Bojan Smojver <bojan(a)rexursive.com> - 1.1.2-5
- patch upstream issue #427
* Thu Aug 13 2009 Bojan Smojver <bojan(a)rexursive.com> - 1.1.2-4
- try one more time
* Thu Aug 13 2009 Bojan Smojver <bojan(a)rexursive.com> - 1.1.2-3
- better mimetypes.conf generation script
* Wed Aug 12 2009 Bojan Smojver <bojan(a)rexursive.com> - 1.1.2-2
- fix replacement of various config variables
* Wed Aug 12 2009 Bojan Smojver <bojan(a)rexursive.com> - 1.1.2-1
- bump up to 1.1.2
- security fix: validate the 'view' parameter to avoid XSS attack
- security fix: avoid printing illegal parameter names and values
* Tue Aug 11 2009 Bojan Smojver <bojan(a)rexursive.com> - 1.1.1-2
- install mimetypes.conf
- populate mimetypes.conf with what pygments understands
* Thu Jun 4 2009 Bojan Smojver <bojan(a)rexursive.com> - 1.1.1-1
- Bump up to 1.1.1
* Thu May 14 2009 Bojan Smojver <bojan(a)rexursive.com> - 1.1.0-1
- Final 1.1.0
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update viewvc' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------