cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
134,194 Commits 1 Branch 0 Tags
Commit Graph

11 Commits

Author SHA1 Message Date
kn
e0c38778e1 Security update to cgit-1.2.1 
This fixes a directory traversal bug:
https://bugs.chromium.org/p/project-zero/issues/detail?id=1627

While here:

* in README refer to an installed manual page instead of the
online version
* use simpler and AF agnostic httpd.conf(5) syntax in our example

Tested, verified and OK landry
 2018-08-04 09:19:35 +00:00
landry
89046c2316 Update to cgit 1.1, from Hiltjo Posthuma, thanks! 
- pass the option NO_GETTEXT=1 to git to disable gettext support.
- add a patch patches/patch-setup_c to not open /dev/null in the chroot.
- add a OpenBSD httpd (with slowcgi) example to the README.
- add an explanation a static gzip binary is required for .tar.gz snapshot support.

(and fix RCS Ids while here)
 2017-03-22 20:23:52 +00:00
landry
b1d817d56d Update to cgit-1.0. 
ok sthen@
 2016-06-17 07:22:39 +00:00
sthen
dddbc050a2 update to cgit-0.12, ok landry 
Fixes some XSS and header injection problems and an int overflow in
CONTENT_LENGTH resulting in buffer overflow
 2016-01-14 22:09:15 +00:00
landry
32cc5a6202 Update to cgit 0.11.2, tested in "production" on 5.6. 
Consolidate info from cgit.conf and MESSAGE into a README, and add a
config snippet for a vhost on nginx.
Disable the filter feature as it wouldnt work with the way cgit.cgi is
built statically for us.
 2015-04-05 22:07:59 +00:00
jasper
cc117eb26c - update to cgit-0.9.2 
- bump git to 1.8.3.2
- sync MASTER_SITES with the git port

ok landry@
 2013-07-15 07:00:49 +00:00
sthen
12434a6dd8 update to cgit 0.9.1; new upstream site. ok landry 2012-11-15 19:58:48 +00:00
landry
3d0d00ffaf Fix for heap overflow/stack-smashing, see 
http://hjemli.net/pipermail/cgit/2012-July/000652.html
http://git.zx2c4.com/cgit/commit/?id=7757d1b046ecb67b830151d20715c658867df1ec
https://bugzilla.redhat.com/show_bug.cgi?id=820733
from oss-sec via sthen@
 2012-10-01 16:13:23 +00:00
landry
935c04e345 Update to cgit 0.9.0.2 
thx ajacoutot@ for hosting the distfile.
 2012-03-06 17:17:09 +00:00
jasper
f79073076f Security fix for CVE-2011-2711, cgit Rename Hint Script Insertion Vulnerability 
from upstream
 2011-07-27 13:34:05 +00:00
landry
4384ef8d72 Import cgit 0.8.3.5: 
cgit is a fast web interface for the git scm, using a builtin cache to
decrease server io-pressure.

With tweaks from and ok sthen@ jasper@
 2011-04-03 10:27:24 +00:00