Commit Graph

27 Commits

Author SHA1 Message Date
kn
74d5f14abc Update to cgit 1.2.3
From Lucas Raab, thanks!
2020-04-04 19:28:31 +00:00
sthen
77f7cc9c61 replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes 2019-07-12 20:49:33 +00:00
espie
f4b7f81318 convert to PKGSTEM 2018-09-04 12:46:09 +00:00
kn
e0c38778e1 Security update to cgit-1.2.1
This fixes a directory traversal bug:
https://bugs.chromium.org/p/project-zero/issues/detail?id=1627

While here:

* in README refer to an installed manual page instead of the
online version
* use simpler and AF agnostic httpd.conf(5) syntax in our example

Tested, verified and OK landry
2018-08-04 09:19:35 +00:00
bentley
96dd361c1d Install the cgit manpage.
ok ajacoutot@ landry@
2018-01-05 08:31:26 +00:00
landry
89046c2316 Update to cgit 1.1, from Hiltjo Posthuma, thanks!
- pass the option NO_GETTEXT=1 to git to disable gettext support.
- add a patch patches/patch-setup_c to not open /dev/null in the chroot.
- add a OpenBSD httpd (with slowcgi) example to the README.
- add an explanation a static gzip binary is required for .tar.gz snapshot support.

(and fix RCS Ids while here)
2017-03-22 20:23:52 +00:00
landry
b1d817d56d Update to cgit-1.0.
ok sthen@
2016-06-17 07:22:39 +00:00
sthen
a1924ac191 adjust following apache1 removal 2016-04-29 09:40:51 +00:00
naddy
52501c1f09 replace libiconv module with library dependency; no bump needed 2016-04-09 20:14:48 +00:00
sthen
144e44f23c update the version of git in cgit to 2.7.2, upstream have done this in
their tree which isn't hugely different to the 0.12 release that we have.
2016-03-16 08:56:02 +00:00
sthen
dddbc050a2 update to cgit-0.12, ok landry
Fixes some XSS and header injection problems and an int overflow in
CONTENT_LENGTH resulting in buffer overflow
2016-01-14 22:09:15 +00:00
landry
32cc5a6202 Update to cgit 0.11.2, tested in "production" on 5.6.
Consolidate info from cgit.conf and MESSAGE into a README, and add a
config snippet for a vhost on nginx.
Disable the filter feature as it wouldnt work with the way cgit.cgi is
built statically for us.
2015-04-05 22:07:59 +00:00
naddy
2235cd4981 switch from "-static" to "${STATIC}, i.e., build static PIE executables
on most archs
2015-03-14 20:52:46 +00:00
sthen
2bcd8c5c0c /var/www/conf/modules.sample is no longer provided by base; noticed by florian@ 2014-05-30 13:14:08 +00:00
naddy
c2832a1290 move http://code.google.com, *.googlecode.com, and sites.google.com to https
suggested by bentley@
2013-08-07 21:31:12 +00:00
jasper
cc117eb26c - update to cgit-0.9.2
- bump git to 1.8.3.2
- sync MASTER_SITES with the git port

ok landry@
2013-07-15 07:00:49 +00:00
jasper
c38dcacc50 use ${VARBASE} instead of hardcoding /var 2013-07-05 09:34:35 +00:00
jasper
256c0ea000 modules.sample/ always lives in /var/www, so no need for ${PREFIX} here.
as discussed with aja@
2013-05-05 19:24:13 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
sthen
12434a6dd8 update to cgit 0.9.1; new upstream site. ok landry 2012-11-15 19:58:48 +00:00
landry
3d0d00ffaf Fix for heap overflow/stack-smashing, see
http://hjemli.net/pipermail/cgit/2012-July/000652.html
http://git.zx2c4.com/cgit/commit/?id=7757d1b046ecb67b830151d20715c658867df1ec
https://bugzilla.redhat.com/show_bug.cgi?id=820733
from oss-sec via sthen@
2012-10-01 16:13:23 +00:00
landry
9e90ef2368 Build cgit static by default to ease upgrades within the httpd chroot.
Prompted by a diff from Olivier Mehani on ports@
looks good to sthen@
2012-09-17 19:37:09 +00:00
landry
935c04e345 Update to cgit 0.9.0.2
thx ajacoutot@ for hosting the distfile.
2012-03-06 17:17:09 +00:00
jasper
f79073076f Security fix for CVE-2011-2711, cgit Rename Hint Script Insertion Vulnerability
from upstream
2011-07-27 13:34:05 +00:00
stsp
9128e158da Unbreak cgit following the devel/git update to 1.7.5.
Link to git-1.7.4.5 instead of build-depending on devel/git until upstream
resolves issues caused by API changes in git-1.7.5.
ok landry
2011-05-03 13:57:26 +00:00
jasper
a4367ae483 mirror the distfile, as the tarball changes checksum at each fetch
requested by landry@
2011-04-03 21:32:49 +00:00
landry
4384ef8d72 Import cgit 0.8.3.5:
cgit is a fast web interface for the git scm, using a builtin cache to
decrease server io-pressure.

With tweaks from and ok sthen@ jasper@
2011-04-03 10:27:24 +00:00