gitea-mirror
/
blog
mirror of https://gitea.com/gitea/blog.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
blog/content/post/release-of-1.12.4.md

4.4 KiB
Raw Permalink Blame History

date authors title tags draft coverImageRelease
2020-09-04T04:00:00+00:00 6543 Gitea 1.12.4 is released
release
gitea
false 1.12.4

We are proud to present the release of Gitea version 1.12.4.

We highly encourage users to update to this version for some important bug-fixes.

We have merged 24 pull requests to release this version.

We would like to give a special thanks to Jeffrey C. Ollie (@jcollie), Osama Hamad (@osamahamad) and RedTeam Pentesting GmbH for reporting security issues that have been patched in this release.

You can download one of our pre-built binaries from our downloads page - make sure to select the correct platform! For further details on how to install, follow our installation guide.

We would also like to thank all of our supporters on Open Collective who are helping to sustain us financially.

Changelog

1.12.4 - 2020-09-03

  • SECURITY
    • Escape provider name in oauth2 provider redirect (#12648) (#12650)
    • Escape Email on password reset page (#12610) (#12612)
    • When reading expired sessions - expire them (#12686) (#12690)
  • ENHANCEMENTS
    • StaticRootPath configurable at compile time (#12371) (#12652)
  • BUGFIXES
    • Fix to show an issue that is related to a deleted issue (#12651) (#12692)
    • Expire time acknowledged for cache (#12605) (#12611)
    • Fix diff path unquoting (#12554) (#12575)
    • Improve HTML escaping helper (#12562)
    • models: break out of loop (#12386) (#12561)
    • Default empty merger list to those with write permissions (#12535) (#12560)
    • Skip SSPI authentication attempts for /api/internal (#12556) (#12559)
    • Prevent NPE on commenting on lines with invalidated comments (#12549) (#12550)
    • Remove hardcoded ES indexername (#12521) (#12526)
    • Fix bug preventing transfer to private organization (#12497) (#12501)
    • Keys should not verify revoked email addresses (#12486) (#12495)
    • Do not add prefix on http/https submodule links (#12477) (#12479)
    • Fix ignored login on compare (#12476) (#12478)
    • Fix incorrect error logging in Stats indexer and OAuth2 (#12387) (#12422)
    • Upgrade google/go-github to v32.1.0 (#12361) (#12390)
    • Render emoji's of Commit message on feed-page (#12373)
    • Fix handling of diff on unrelated branches when Git 2.28 used (#12370)