You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa gitolite3

Sigurnosni nedostatak programskog paketa gitolite3

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2018-d0bac4ff3b
2018-09-21 05:19:39.112401
——————————————————————————–

Name : gitolite3
Product : Fedora 29
Version : 3.6.9
Release : 1.fc29
URL : http://github.com/sitaramc/gitolite
Summary : Highly flexible server for git directory version tracker
Description :
Gitolite allows a server to host many git repositories and provide access
to many developers, without having to give them real userids on the server.
The essential magic in doing this is ssh’s pubkey access and the authorized
keys file, and the inspiration was an older program called gitosis.

Gitolite can restrict who can read from (clone/fetch) or write to (push) a
repository. It can also restrict who can push to what branch or tag, which
is very important in a corporate environment. Gitolite can be installed
without requiring root permissions, and with no additional software than git
itself and perl. It also has several other neat features described below and
elsewhere in the doc/ directory.

——————————————————————————–
Update Information:

3.6.9
——————————————————————————–
References:

[ 1 ] Bug #1629930 – CVE-2018-16976 gitolite3: gitolite: Improper restriction of access to a Git repository while migration [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1629930
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2018-d0bac4ff3b’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

 

——————————————————————————–
Fedora Update Notification
FEDORA-2018-dc060c6f2a
2018-09-21 07:41:02.267708
——————————————————————————–

Name : gitolite3
Product : Fedora 28
Version : 3.6.9
Release : 1.fc28
URL : http://github.com/sitaramc/gitolite
Summary : Highly flexible server for git directory version tracker
Description :
Gitolite allows a server to host many git repositories and provide access
to many developers, without having to give them real userids on the server.
The essential magic in doing this is ssh’s pubkey access and the authorized
keys file, and the inspiration was an older program called gitosis.

Gitolite can restrict who can read from (clone/fetch) or write to (push) a
repository. It can also restrict who can push to what branch or tag, which
is very important in a corporate environment. Gitolite can be installed
without requiring root permissions, and with no additional software than git
itself and perl. It also has several other neat features described below and
elsewhere in the doc/ directory.

——————————————————————————–
Update Information:

3.6.9
——————————————————————————–
ChangeLog:

* Tue Sep 11 2018 Gwyn Ciesla <limburgher@gmail.com> – 1:3.6.9-1
– Latest upstream.
* Tue Jul 17 2018 Gwyn Ciesla <limburgher@gmail.com> – 1:3.6.8-1
– Latest upstream.
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> – 1:3.6.7-7
– Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Wed Jun 27 2018 Jitka Plesnikova <jplesnik@redhat.com> – 1:3.6.7-6
– Perl 5.28 rebuild
* Tue Apr 24 2018 Pierre-Yves Chibon <pingou@pingoured.fr> – 1:3.6.7-5
– Back upstream patch making gitolite respect the ALLOW_ORPHAN_GL_CONF
configuration variabe
– Include the compile-1 command upstream brought in Fedora in:
https://github.com/sitaramc/gitolite/commit/afb8afa14a892895dc48664c6526351cb
——————————————————————————–
References:

[ 1 ] Bug #1629930 – CVE-2018-16976 gitolite3: gitolite: Improper restriction of access to a Git repository while migration [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1629930
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2018-dc060c6f2a’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

AutorZvonimir Bosnjak
Cert idNCERT-REF-2018-09-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostaci programskog paketa ghostscript

Otkriveni su sigurnosni nedostaci u programskom paketu ghostscript za operacijski sustav Fedora. Otkriveni nedostaci potencijalnim napadačima omogućuju izvršavanje proizvoljnog programskog...

Close