Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Fedora: 2019-b276ee69a8 Critical: Gitolite3 Security Patch Released

fedora
Calendar Grey January 19, 2019
Dist Fedora Esm H88
The latest Gitolite3 security patch for Fedora 29 introduces critical enhancements. Update immediately to safeguard your environments.
3.6.11: https://github.com/sitaramc/gitolite/commit/b49133dc5f49b12807165ed2503 07213c1ac0a53

Summary

Gitolite allows a server to host many git repositories and provide access

to many developers, without having to give them real userids on the server.

The essential magic in doing this is ssh's pubkey access and the authorized

keys file, and the inspiration was an older program called gitosis.

Gitolite can restrict who can read from (clone/fetch) or write to (push) a

repository. It can also restrict who can push to what branch or tag, which

is very important in a corporate environment. Gitolite can be installed

without requiring root permissions, and with no additional software than git

itself and perl. It also has several other neat features described below and

elsewhere in the doc/ directory.

3.6.11: https://github.com/sitaramc/gitolite/commit/b49133dc5f49b12807165ed2503

07213c1ac0a53

* Tue Jan 8 2019 Gwyn Ciesla - 1:3.6.11-1

- 3.6.11.

* Thu Oct 4 2018 Gwyn Ciesla - 1:3.6.10-1

- 3.6.10.

su -c 'dnf upgrade --advisory FEDORA-2019-b276ee69a8' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 29
Version: 3.6.11
Release: 1.fc29
Summary: Highly flexible server for git directory version tracker

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here