Bug 17030

Summary:	upgrade viewvc to at least 1.1.22 for linkification of line numbers
Product:	Infrastructure	Reporter:	Florian Hubold <doktor5000>
Component:	BuildSystem	Assignee:	Sysadmin Team <sysadmin-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	Normal	CC:	doktor5000, sysadmin-bugs
Version:	unspecified
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	http://svnweb.mageia.org
Whiteboard:
Source RPM:		CVE:
Status comment:

Description Florian Hubold 2015-10-27 11:43:47 CET

Description of problem:

Please update our ViewVC so that we gain linkification support for line numbers in markup/annotation view. From upstream changelog:
http://viewvc.tigris.org/source/browse/*checkout*/viewvc/tags/1.1.24/CHANGES

Version 1.1.22 (released 14-Jan-2014)
[snip]
  * linkify line numbers in markup/annotate view

That would also bring a security fix from 1.16:

  * security fix: escape "extra" diff info to avoid XSS attack (issue #515)


Reproducible: 

Steps to Reproduce:

Comment 1 Florian Hubold 2016-01-01 20:35:54 CET

Ping?

We already have viewvc-1.1.22 in mga5. Or is a backport necessary, if so to which of the infra_x repositories ?

CC: (none) => doktor5000

Comment 2 Frédéric "LpSolit" Buclin 2017-04-22 20:03:40 CEST

http://svnweb.mageia.org/ is powered by ViewVC 1.1.26 now.

URL: svnweb.mageia.org => http://svnweb.mageia.org
Resolution: (none) => FIXED
Summary: upgrade viewvc to at least 1.22 for linkification of line numbers => upgrade viewvc to at least 1.1.22 for linkification of line numbers
Status: NEW => RESOLVED