| changeset | 1482729ba16d |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | doc: add XSS discoverer to ack |
| files |
| changeset | 3bf6ad421347 |
|---|---|
| branch | |
| bookmark | |
| tag | 2.5.0b1 |
| user | John Rouillard <rouilj@ieee.org> |
| description | chore: update files for release 2.5.0b1. |
| files |
| changeset | 4f07d7835019 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | build: some work from RELEASE.txt for 2.4.0 release. |
| files |
| changeset | 28aa76443f58 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | fix(security): fix CVE-2024-39124, CVE-2024-39124, and CVE-2024-39125 Directions for fixing: * `CVE-2024-39124`_ - :ref:`classhelpers (_generic.help.html) are vulnerable to an XSS attack. <CVE-2024-39124>` Requires fixing tracker homes. * `CVE-2024-39125`_ - :ref:`if Referer header is set to a script tag, it will be executed. <CVE-2024-39125>` Fixed in release 2.4.0, directions available for fixing in prior versions. * `CVE-2024-39126`_ - :ref:`PDF, XML and SVG files downloaded from an issue can contain embedded JavaScript which is executed. <CVE-2024-39126>` Fixed in release 2.4.0, directions available for fixing in prior versions. prior to 2.4.0 release this weekend that fixes the last two CVE's. |
| files |
| changeset | 63155529cfe3 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | docs: fix missing indent. |
| files |
| changeset | a377590eba34 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | changes for 2.4.0b0 release |
| files |
| changeset | fe0348bbe45b |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | issue2551353 - Add roundup-classhelper for 2.4.0 release Changes to the classic template are not done yet. Still testing. This commit has document updates and changes to rest.py. rest.py: add /rest/data/user/role endpoint to core so the user doesn't have to add the /rest/roles endpoint via interfaces.py. It will only send roles for a user with Admin role and there is no way to override this currently. acknowledgements.txt: Added members of team3 to other contributors. Specified for all other contributes what they worked on. upgrading.txt: added classhelper section and basic template change directions. Linked to admin_guide for full directions. admin_guide.txt: documented install, translation, troubleshooting, config etc. user_guide.txt: added section on using the classhelper. Added reference to section earlier in the doc. Added image for section. |
| files |
| changeset | 5b41018617f2 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | fix: out of memory error when importing under postgresql If you try importing more than 20k items under postgresql you can run out of memory: psycopg2.errors.OutOfMemory: out of shared memory HINT: You might need to increase max_locks_per_transaction. Tuning memory may help, it's unknown at this point. This checkin forces a commit to the postgres database after 10,000 rows have been added. This clears out the savepoints for each row and starts a new transaction. back_postgresql.py: Implement commit mechanism in checkpoint_data(). Add two class level attributes for tracking the number of savepoints and the limit when the commit should happen. roundup_admin.py: implement pragma and dynamically create the config item RDBMS_SAVEPOINT_LIMIT used by checkpoint_data. Also fixed formatting of descriptions when using pragma list in verbose mode. admin_guide.txt, upgrading.txt: Document change and use of pragma savepoint_limit in roundup-admin for changing the default of 10,000. test/db_test_base.py: add some more asserts. In existing testAdminImportExport, set the savepoint limit to 5 to test setting method and so that the commit code will be run by existing tests. This provides coverage, but does not actually test that the commit is done every 5 savepoints 8-(. The verification of every 5 savepoints was done manually using a pdb breakpoint just before the commit. acknowledgements.txt: Added 2.4.0 section mentioning Norbert as he has done a ton of testing with much larger datasets than I can test with. |
| files |
| changeset | ed2bc951277b |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | Updates for 2.3.0 release. |
| files |
| changeset | 52f22cfcbdc1 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | update for latest change to sort method. |
| files |
| changeset | 623502678b97 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | 2.3.0b1 release changes roundup/__init__.py: Update version setup.py: Mark as beta release; add python 3.11/3.12 as supported language versions. website/www/conf.py: update version/release to 2.3b1/2.3.0b1 website/www/index.txt: update highlights/version website/www/signatures/: Add 2.3.0b1 pgp signature. Will be removed when 2.3.0 is released but this allows me to test. docs: Fix links Update acknowlegements with 2.3.x churn/contrib etc. locale: update software version, creation date; rebuild template and propagate changes. MANIFEST.in: add locale/Makefile |
| files |
| changeset | c83038a606ac |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | Add description metadata. |
| files |
| changeset | a1868fe784d0 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | Changes for release 2.2.0. |
| files |
| changeset | b3ba03d2b214 |
|---|---|
| branch | |
| bookmark | |
| tag | 2.2.0b1 |
| user | John Rouillard <rouilj@ieee.org> |
| description | 2.2.0b1 release changes |
| files |
| changeset | c9b56477fb41 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Add changelog and attribution |
| files |
| changeset | cbc18a8bc61f |
|---|---|
| branch | |
| bookmark | |
| tag | 2.1.0 |
| user | John Rouillard <rouilj@ieee.org> |
| description | Changes for release of version 2.1.0. Updates specified in RELEASE.txt. |
| files |
| changeset | 5296d27ac97c |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | Implementing RELEASE.txt 2.1.0b1 release Also spellcheck CHANGES.txt. |
| files |
| changeset | 043a8ffd79ad |
|---|---|
| branch | |
| bookmark | |
| tag | 2.0.0 |
| user | John Rouillard <rouilj@ieee.org> |
| description | Commits for roundup 2.0 release. |
| files |
| changeset | eb9d00db0923 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | Forgot to check in changed doc files for 2.0.0beta0 |
| files |
| changeset | 29d428927362 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | prep for 2.0.0alpha0 release. Initial set of changes for the release. Still a few files to change. |
| files |
| changeset | fe96015445e9 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Reorder html entities generated by submit button issue2551065: This allows styles to be applied. Thanks to Garth Jensen for the patch against release 1.6 |
| files |
| changeset | 167ef847fcdf |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | issue2551053: Fix routing dict in rest.py The routing dictionary in rest.py used compiled regular expressions as dictionary keys. This worked most of the time because the regex lib uses a cache but resulted in duplicate keys in the dictionary in some cases where a single key should have been used. Thanks to Robert Klonner for discovering the problem, debugging the root cause and providing a first proposed fix. |
| files |
| changeset | b68d3d8531d5 |
|---|---|
| branch | maint-1.6 |
| bookmark | |
| tag | 1.6.1 |
| user | John Rouillard <rouilj@ieee.org> |
| description | Changes to prepare for 1.6.1 release. |
| files |
| changeset | 33f8bb777659 |
|---|---|
| branch | REST-rebased |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Add changelog, acknowledgements |
| files |
| changeset | dc6cc2dbd70a |
|---|---|
| branch | |
| bookmark | |
| tag | 1.6.0 |
| user | John Rouillard <rouilj@ieee.org> |
| description | add subhead for 1.6.0 release |
| files |
| changeset | 6a743a1c2bc0 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | Add link to announcement.html. It is for current release only. |
| files |
| changeset | 1eba4c7149e4 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | Update acknowledgements.txt. |
| files |
| changeset | bb1125433de6 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Bernhard Reiter <bernhard@intevation.de> |
| description | doc: (minor) remove some trailing whitespace |
| files |
| changeset | 349b8465ba41 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Rouillard <rouilj@ieee.org> |
| description | Fix formatting of developer activity. |
| files |
| changeset | 8cd7233986bf |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Add Trent Gamblin to acknowledgements See latest patch for issue2550937. |
| files |
| changeset | a76fbb9f5535 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Fix Traceback in backends/portalocker.py (windows) .. due to missing windll import, thanks to Heiko Stegmann for suggesting a first fix. |
| files |
| changeset | f52a9fb035d2 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Bernhard Reiter <bernhard@intevation.de> |
| description | Credits: Added 1.5.0 and 1.5.1 as their own sections to acknowledgements. |
| files |
| changeset | 760ffc0eae5b |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | John Kristensen <john@jerrykan.com> |
| description | Change email package module names to conform v4 (issue2550875) Update the mailer roundup module to use email package names introduced in v4 (Python v2.5). If nothing else this will provide forward support for Python v3+. Thanks to Anthony Pankov for the patch. |
| files |
| changeset | f211f5da0d74 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Thomas Arendsen Hein <thomas@intevation.de> |
| description | add missing commas in acknowlegements |
| files |
| changeset | df4c1f58c3b8 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Add acknowlegements |
| files |
| changeset | b9960e506043 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Add Pradip Caulagi to acknowledgements |
| files |
| changeset | 4f9c3858b671 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Fix another XSS with the ok- and error message, see issue2550724. We solve this differently from the proposals in the bug-report by not allowing *any* html-tags in ok/error messages anymore. Thanks to David Benjamin for the bug-report and to Ezio Melotti for several proposed fixes. |
| files |
| changeset | 71b9428a14e5 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | anatoly techtonik <techtonik@gmail.com> |
| description | Found my old contribution from changeset 0112e9e1d068. Fixing credits. |
| files |
| changeset | 033a550812fc |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Fix another XSS with the "otk" parameter. Thanks to Jesse Ruderman for reporting. |
| files |
| changeset | 753a379c0303 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Fix syntax errors in doc/upgrading.txt and .gitignore doc/upgrading.txt produced errors with latest docutils about wrong block structure. Thanks to Cheer Xiao for the patches. |
| files |
| changeset | 941681fec1b0 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | issue2550711 Fix XSS vulnerability in @action parameter. thanks to "om" for reporting. Also fix issue number of previous change-entry. |
| files |
| changeset | 8469ce312dcf |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <rsc@runtux.com> |
| description | Updated version of simplified Chinese message file by Cheer Xiao. Corrected some mistakes, added a few more items and did some formating. |
| files |
| changeset | 6327b1b21593 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Eric S. Raymond <esr@thyrsus.com> |
| description | Adding myself to the contributors list. |
| files |
| changeset | d48f88f4c3c8 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
| description | - add latest change to CHANGES.txt changelog |
| files |
| changeset | bb667c81f848 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
| description | - recent attributions |
| files |
| changeset | 8df9492c2746 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
| description | Fix file-unlink bug in mailgw (Ralfs oversight when refactoring the mail gateway code) -- if a message is sent that contains no attachments, all previous files of the issue are unlinked, thanks to Rafal Bisingier for reporting and proposing a fix. I've now added a regression test that catches this issue. |
| files |
| changeset | e76576b52f2d |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
| description | Norwegian Bokmal translation by Christian Aastorp (with some fixes regarding leading and trailing newlines) |
| files |
| changeset | 1613754d2646 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
| description | Fix first part of Password handling security issue2550688 (thanks Joseph Myers for reporting and Eli Collins for fixing) Small change against original patch: We still accept plaintext passwords (in known_schemes) when parsing encrypted password (e.g. from database). This way existing databases with plaintext passwords continue to work (I don't know of any, this would need patching on the users side) and all regression tests pass. |
| files |
| changeset | 9be284ce56b7 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Richard Jones <richard@users.sourceforge.net> |
| description | Fixed bug in mailgw refactoring, patch issue2550697 (thanks Hubert Touvet) |
| files |
| changeset | 80a9295a60fd |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
| description | Fix setting of sys.path when importing schema.py, fixes issue2550675, thanks to Bryce L Nordgren for reporting. |
| files |
| changeset | c114843fcfbc |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Richard Jones <richard@users.sourceforge.net> |
| description | Allow search_popup macro to work with all db classes, issue2550567 (thanks John Kristensen) |
| files |
| changeset | 579802067547 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
| description | Fix charset of first text-part of outgoing multipart messages... ...thanks Dirk Geschke for reporting, see http://thread.gmane.org/gmane.comp.bug-tracking.roundup.user/10223 This also adds some regression tests to test incoming latin1 and outgoing single- and multipart utf-8 and latin1 messages |
| files |
| changeset | eade357a1a16 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Ralf Schlatterbeck <schlatterbeck@users.sourceforge.net> |
| description | - update acknowledgements |
| files |
| changeset | 36d52125c9cf |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Richard Jones <richard@users.sourceforge.net> |
| description | fixed registration, issue2550665 (thanks Timo Paulssen) |
| files |
| changeset | 06af6d5bedbe |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Richard Jones <richard@users.sourceforge.net> |
| description | fix for incorrect except: syntax, issue2550661 |
| files |
| changeset | d5239335fae3 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Richard Jones <richard@users.sourceforge.net> |
| description | make URL detection a little smarter about brackets per issue2550657 (thanks Ezio Melotti) |
| files |
| changeset | 6893b5253dac |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Richard Jones <richard@users.sourceforge.net> |
| description | add note & thanks |
| files |
| changeset | 378fc1ecaaa6 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Richard Jones <richard@users.sourceforge.net> |
| description | Default to "text/plain" if no Content-Type header is present in email (thanks Hauke Duden) |
| files |
| changeset | 38265325492a |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Richard Jones <richard@users.sourceforge.net> |
| description | support CRAM-MD5 for IMAPS |
| files |
| changeset | 85b00a3820b3 |
|---|---|
| branch | |
| bookmark | |
| tag | |
| user | Richard Jones <richard@users.sourceforge.net> |
| description | Fix thread safety with stdin in roundup-server |
| files |