[Pkg-owncloud-commits] [owncloud] annotated tag v4.0.16 created (now 68d8e3f)
David Prévot
taffit at alioth.debian.org
Fri Nov 8 23:10:01 UTC 2013
This is an automated email from the git hooks/post-receive script.
taffit pushed a change to annotated tag v4.0.16
in repository owncloud.
at 68d8e3f (tag)
tagging e477c6799e049fc523ced873ef5b5363f306051c (commit)
replaces v4.0.15
tagged by Frank Karlitschek
on Thu Jun 6 10:11:53 2013 +0200
- Log -----------------------------------------------------------------
4.0.16
Frank Karlitschek (1):
4.0.16
Thomas Tanghus (1):
Escape file name in filepicker
-----------------------------------------------------------------------
This annotated tag includes the following new commits:
new e899c99 Show Login-Button when user+pw are autocompleted, fixes oc-1068
new 6b78ca1 LDAP: sanitize base, user and group trees. fixes oc-1302
new 0970a3c Contacts: Fix no active Addressbooks
new 758ae42 Calendar: remove double html encoding
new c32a99b fix label for versioning in admin settings
new e9e84b5 Merge branch 'stable4' of git://gitorious.org/owncloud/owncloud into stable4
new 2cfc7f7 fix for bug 879 - add parent directory to file cache if it does not exist yet. For example this can happen if the sync client is used before the user created the root directory (e.g. through web login).
new a366ba4 Fix for broken Mail App in OSX Mountain Lion. https://mail.kde.org/pipermail/owncloud/2012-August/004649.html
new aae17d4 Sanitize user input
new 7581d55 Missed an "echo"
new 5192eec Added XSRF check
new baab13a Validate cookie to prevent auth bypasses.
new e9a6390 Don't return file handle if the mode supports writing and the file is not writable
new 2871896 Check if webfinger is enabled
new 6d94455 Fix OC_Connector_Sabre_Locks for SQLite
new 2024d42 Disable listing of all users
new 4fd069b Also check some other files
new 95ef80e Check blacklist when renaming files
new 4682846 Disable user enumeration
new 526e704 4.0.7 and remove some ^M while at it
new f53dd22 backport 1bccc80996e270f928c207cdd3090f4284abaea5
new 4500359 Use SCRIPT_NAME instead of PHP_SELF which won't send the PATH_INFO, this prevents XSS in old browsers. Thanks to Nico Golde.
new 4984a72 Add a missing exit();
new 2051a5d Fix deletion for browser that do not support onBeforeUnload, fixes oc-1534
new 5afdfec Sanitizing the user input to prevent a reflected XSS. Thanks to Nico Golde (ngolde.de)
new 49c17fc I like TLS/SSL
new a791753 Gitorious => Github
new b112035 LDAP: check for existing username from other backends when creating one for an LDAP user or group. Fixes oc-1551 in stable4. Also optimizes groupExists() function as side effect.
new b37d318 back port better input validation in calendar from apps repo
new ac43640 fix typos + copy-paste errors in comments
new 88d9582 fix typos
new 76ccd69 mark unused variables
new 943a9a2 Merge pull request #10 from ne704/typos
new ae3ea39 fix message about 'apps' directory
new d050e6e Merge pull request #11 from ne704/typos
new 95a7481 Fix for cyrillic folder names. ref#oc-1683
new 0f489e8 LDAP: transliterate other latin characters to ASCII when creating owncloud names. Already created usernames are not being affected. Fixes ugly names with removed Umlauts, chars with accents and likes.
new 3b465f4 Allow exporting of users from any user backend, fixed oc-1645
new a5c42ed Only try to delete migration.db if it was created.
new 1954f80 Don't store users password hash when exporting.
new 1e7ac8b Sanitize user input
new 292d205 Passwords containing a ":" don't work with this explode
new c212d11 fix default values in table fscache
new ca216b5 Trim trailing whitespace from version.
new 375eae1 Use openssl_random_pseudo_bytes if available
new b76a335 Sanitize user input
new f96bf9e Remove the webodf sources
new d8e0be1 destroy invalid sessions
new 033ac60 4.0.8
new 7cf1332 Don't try to add invalid cards via CardDAV.
new d4b19ef Update FullCalendar to 1.5.4
new 299c664 escapeHTML function
new 77eff34 Sanitize file names
new 1772f36 Sanitize file names
new 306eb6d Doublehash the token to prevent timing attacks
new e99cf5c Fallback to /dev/random if openssl_random_pseudo_bytes not available
new 7f06f93 Show a warning in the installer if no secure RNG is available
new 3ca5c71 Use /dev/urandom instead of /dev/random
new 6c22983 Set oc_token to httponly
new 4a1f1a4 Show a warning in the installer if .htaccess is not working
new ecbf9ff "deny from all" instead directory
new 6244d68 Fix 'App already installed' for app with entry in DB and no files
new b78b989 Fix migration problems for postgresql with MDB2 fix owncloud/apps#21
new c73eb29 Backport of ad720c4 for oC 4.x
new 6540c0f fix OC_Filesystem::isValidPath when using \ instead of / in paths
new 4b86c43 check for filename blacklist in OC_Filesystem::isValidPath
new 3cd31ee support string values ('true' and 'false') for configuring the secure parameter on external storage backends
new 3a52982 Migration: Allow for no app data cases; handle file copying better
new 7d246ab Migration: On import of user accounts only import folders in home dir, use OC_Helper::copyr
new 28fdba2 4.0.9
new b24c929 Encode the URI properly
new 8e4b301 backport fix admin check
new c56f52b ownCloud 4.0.10
new 3f37063 Encode the URI
new f71f0ad Use the internal function
new 4e2b834 Use GET instead of QUERY_STRING
new f603454 Also replace the backslash with a minus
new 306d5ee Sanitize the exception
new 708bd92 improve calendar list view
new d500440 4.0.11
new 0f227fa increase the internal number too
new 015ac6a add callcheck in guesstimezone.php
new 74e73bc Remove invalid characters from app id to prevent loading of invalid resources
new 1fbb89a [external] Encode HTML
new 97d0cee Check requesttoken
new 28dc89e [admin_migrate] Add requesttoken
new de9befd [user_migrate] Add requesttoken
new b966095 [user_ldap] Add requesttoken
new 3ad6ea0 Fixing php lint error
new 5b4c48d Merge pull request #1651 from owncloud/backports
new 57f40b2 backport https://github.com/owncloud/core/pull/1751
new 1ab3084 4.0.12
new fae5bd3 Contacts: Backport filename sanitation and blacklist checking to stable4.
new 7b6a022 Check if username is valid and remove slashes from filename
new ee8d198 4.0.13
new 792c5ec Backport SabreDAV LocalAssetPath fix
new ab5a504 Add 2.2.20 source
new 60f6bfa Bump Jplayer
new a8acec2 Merge pull request #2809 from owncloud/bump_jplayer
new 81f5324 Merge pull request #2806 from owncloud/sabre-4
new cdd10ba Use more random source
new 5e9a8b0 4.0.14
new 1fb796c Media: Escape HTML
new 084448a Merge pull request #3075 from owncloud/media_stable4_html
new d38c7a1 Also check if the source path is valid for rename and copy operations
new ac42301 Check if URL is valid
new 8eef791 Check if URL is valid
new df54cd5 Merge pull request #3198 from owncloud/check-url
new 038f00d 4.0.15
new 17b44bf Escape file name in filepicker
new e477c67 4.0.16
The 111 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/owncloud.git
More information about the Pkg-owncloud-commits
mailing list