openSUSE Recommended Update: Recommended update for fossil ______________________________________________________________________________ Announcement ID: openSUSE-RU-2020:0776-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fossil fixes the following issues: fossil was updated to 2.11: * Support Markdown in the default ticket configuration * Timestamp strings in object names can now omit punctation * Enhance backlink processing so that it works with Markdown- formatted tickets and so that it works for wiki pages fossil rebuild is needed to take full advantage of this fix * Many improvements to the forum and especially email notification of forum posts * Minimum length of a self-registered user ID increased from 3 to 6 characters * Rework the fossil grep command to be more useful * Expose the redirect-to-https setting to the settings command * Most commands now support the Unix-conventional "--" flag to treat all following arguments as filenames instead of flags * Add the mimetypes config setting * security harening against possibly tampered database schemas * Now sends the Content-Security-Policy header * Stop using the IP address as part of the login cookie * many web UI and CLI improvements, documentation updates fossil was updated to 2.10: * Add support for CGI-based Server Extensions * UI improvement and extensions * Change the default hash policy to SHA3 * Performance optimizations fossil was updated to 2.9: * Add the fossil git export command * Web UI layout and behavior improvements * Add the fossil touch command, and the --setmtime option on the fossil open and fossil update commands * Add the /secureraw page that requires the complete SHA1 or SHA3 hash, not just a prefix, before it will deliver content * Improvement to clone and sync behavior * many other bug fixes and improvements fossil was updated to 2.8: * Show cherry-pick merges as dotted lines on the timeline graph. The "fossil rebuild" command must be run to create and populate the new "cherrypick" table in the repository in order for this feature to operate. * Web UI improvements * Wiki setup is now at /setup_wiki * Provide the ability to redirect all HTTP pages to HTTPS * Add the backoffice-disable setting to completely disable the backoffice feature fossil was updated to 2.7: * New email alerts feature * New discussion forum feature * UI improvements for built-in skins on small screens * Use of Content Security Policy (CSP) in built-in skins fossil was updated to 2.6: * Add the new "Classic" timeline viewing mode * Add support HTTP cache control mechanisms * Improvements to various pages and functions * Additional defenses against web-based attacks Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2020-776=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2020-776=1 Package List: - openSUSE Leap 15.1 (x86_64): fossil-2.11-lp151.3.3.1 fossil-debuginfo-2.11-lp151.3.3.1 fossil-debugsource-2.11-lp151.3.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): fossil-2.11-bp151.4.3.1 References: