Received: by mail.netbsd.org (Postfix, from userid 605) id 1A4F084D22; Thu, 20 Aug 2020 22:27:00 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 9503784D04 for ; Thu, 20 Aug 2020 22:26:59 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([IPv6:::1]) by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025) with ESMTP id Gsqjs9sQ5hcj for ; Thu, 20 Aug 2020 22:26:58 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id B70EF84CEA for ; Thu, 20 Aug 2020 22:26:58 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id AA133FB28; Thu, 20 Aug 2020 22:26:58 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1597962418128930" MIME-Version: 1.0 Date: Thu, 20 Aug 2020 22:26:58 +0000 From: "Jonathan Schleifer" Subject: CVS commit: pkgsrc/devel/fossil To: pkgsrc-changes@NetBSD.org Reply-To: js@netbsd.org X-Mailer: log_accum Message-Id: <20200820222658.AA133FB28@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1597962418128930 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: js Date: Thu Aug 20 22:26:58 UTC 2020 Modified Files: pkgsrc/devel/fossil: Makefile distinfo Log Message: Update devel/fossil to 2.12.2 This includes security fixes. Changes for Version 2.12.1 (2020-08-20) (2.12.1): Fix client-side vulnerabilities discovered by Max Justicz. Security fix in the "fossil git export" command. The same fix is also backported to version 2.10.1 and 2.11.1. New "safety-net" features were added to prevent similar problems in the future. Enhancements to the graph display for cases when there are many cherry-pick merges into a single check-in. Example Enhance the fossil open command with the new --workdir option and the ability to accept a URL as the repository name, causing the remote repository to be cloned automatically. Do not allow "fossil open" to open in a non-empty working directory unless the --keep option or the new --force option is used. Enhance the markdown formatter to more closely follow the CommonMark specification with regard to text highlighting. Underscores in the middle of identifiers (ex: fossil_printf()) no longer need to be escaped. The markdown-to-html translator can prevent unsafe HTML (for example: