Package: redmine / 5.0.4-5+deb12u1

Metadata

Package Version Patches format
redmine 5.0.4-5+deb12u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
gemfile deps adjustment.patch | (download)

Gemfile | 32 7 + 25 - 0 !
1 file changed, 7 insertions(+), 25 deletions(-)

 adapt dep requirements
 1) Specifying minor SemVer is too pedantic. Minor versions are
 backwards-compatible by definition. It becomes likely that if any dep is
 updated, this package will break or need to be updated in tandem. It means
 distributions need to spend too much attention on this package between
 upstream releases and also makes it likely that this package will break during
 its tenure in 'stable'. Incrementing the minor SemVer should not break this
 package by definition, so it should be safe to avoid specifying it.
 .
0002 Force table encoding in mysql.patch | (download)

config/initializers/10-patches.rb | 14 14 + 0 - 0 !
1 file changed, 14 insertions(+)

 force table encoding in mysql
 mysql default encoding is not UTF8, but forcing table encoding is
 possible. dbconfig-common does not provide appropriate configuration
 variable, so here the mysql adapter is modified to respect encoding set
 in database.yml

0003 Use production environment by default.patch | (download)

config/boot.rb | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 use production environment by default

0004 Add multi tenancy support.patch | (download)

.gitignore | 1 1 + 0 - 0 !
Gemfile | 10 6 + 4 - 0 !
app/models/attachment.rb | 4 2 + 2 - 0 !
app/models/import.rb | 2 1 + 1 - 0 !
bin/redmine-instances | 289 289 + 0 - 0 !
config/application.rb | 1 1 + 0 - 0 !
config/multitenancy_environment.rb | 42 42 + 0 - 0 !
lib/redmine/configuration.rb | 4 2 + 2 - 0 !
lib/redmine/multi_tenancy.rb | 47 47 + 0 - 0 !
lib/redmine/plugin_loader.rb | 2 1 + 1 - 0 !
lib/redmine/scm/adapters/abstract_adapter.rb | 2 1 + 1 - 0 !
lib/tasks/initializers.rake | 2 1 + 1 - 0 !
12 files changed, 394 insertions(+), 12 deletions(-)

 add multi-tenancy support
 This is an improved version of the combination of a few patches that
 were carried in the Redmine package for Debian GNU/Linux for a few
 years.
 .
 Documentation is provided as a man page produced by
 `./bin/redmine-instances help`
Signed-off-by: Antonio Terceiro <terceiro@debian.org>
Signed-off-by: Jrmy Lal <kapouer@melix.org>
Signed-off-by: Ondej Sur <ondrej@sury.org>

0005 Assume default instance.patch | (download)

lib/redmine/multi_tenancy.rb | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 assume default instance

use_system_jquery_libs.patch | (download)

app/helpers/application_helper.rb | 4 3 + 1 - 0 !
1 file changed, 3 insertions(+), 1 deletion(-)

 use system jquery libraries

broken_tests_skip.patch | (download)

test/functional/attachments_controller_test.rb | 2 2 + 0 - 0 !
test/unit/lib/redmine/wiki_formatting/common_mark/formatter_test.rb | 6 6 + 0 - 0 !
test/unit/lib/redmine/wiki_formatting/common_mark/sanitization_filter_test.rb | 10 10 + 0 - 0 !
3 files changed, 18 insertions(+)

 skip broken tests until fixed upstream

allow activesupport hwia.patch | (download)

config/application.rb | 7 7 + 0 - 0 !
1 file changed, 7 insertions(+)

 allow symbols and activesupport::hashwithindifferentaccess
 in YAML columns temporarily as disabled by the recent Rails security update.
relax pg version.patch | (download)

Gemfile | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 relax pg version to avoid autopkgtest regression.
stop unnecessary recursive chowning.patch | (download)

bin/redmine-instances | 6 5 + 1 - 0 !
1 file changed, 5 insertions(+), 1 deletion(-)

 stop unnecessary recursive chown'ing.
autoload thin gem | (download)

Gemfile | 7 7 + 0 - 0 !
1 file changed, 7 insertions(+)

 load thin gem if installed
 If redmine is run via thin, the thin gem has to be loaded via Gemfile.
CVE 2023 47258.patch | (download)

lib/redmine/wiki_formatting/markdown/formatter.rb | 17 15 + 2 - 0 !
test/unit/lib/redmine/wiki_formatting/markdown_formatter_test.rb | 79 78 + 1 - 0 !
2 files changed, 93 insertions(+), 3 deletions(-)

 [patch] merged r22298 from trunk to 5.0-stable (#38806).

git-svn-id: https://svn.redmine.org/redmine/branches/5.0-stable@22299 e93f8b46-1217-0410-a6f0-8f06a7374b81

CVE 2023 47259.patch | (download)

lib/redmine/wiki_formatting/textile/redcloth3.rb | 8 4 + 4 - 0 !
test/helpers/application_helper_test.rb | 5 3 + 2 - 0 !
2 files changed, 7 insertions(+), 6 deletions(-)

 [patch] merged r22302 and r22303 from trunk to 5.0-stable (#38807).

git-svn-id: https://svn.redmine.org/redmine/branches/5.0-stable@22304 e93f8b46-1217-0410-a6f0-8f06a7374b81

CVE 2023 47260.patch | (download)

app/controllers/attachments_controller.rb | 7 6 + 1 - 0 !
app/controllers/repositories_controller.rb | 5 5 + 0 - 0 !
2 files changed, 11 insertions(+), 1 deletion(-)

 [patch] merged r22294 and r22295 from trunk to 5.0-stable (#38417).

git-svn-id: https://svn.redmine.org/redmine/branches/5.0-stable@22296 e93f8b46-1217-0410-a6f0-8f06a7374b81