Fedora 29: gitolite3 Security Update 2018-d0bac4ff3b
Summary
Gitolite allows a server to host many git repositories and provide access
to many developers, without having to give them real userids on the server.
The essential magic in doing this is ssh's pubkey access and the authorized
keys file, and the inspiration was an older program called gitosis.
Gitolite can restrict who can read from (clone/fetch) or write to (push) a
repository. It can also restrict who can push to what branch or tag, which
is very important in a corporate environment. Gitolite can be installed
without requiring root permissions, and with no additional software than git
itself and perl. It also has several other neat features described below and
elsewhere in the doc/ directory.
3.6.9
[ 1 ] Bug #1629930 - CVE-2018-16976 gitolite3: gitolite: Improper restriction of access to a Git repository while migration [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1629930
su -c 'dnf upgrade --advisory FEDORA-2018-d0bac4ff3b' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
FEDORA-2018-d0bac4ff3b 2018-09-21 05:19:39.112401 Product : Fedora 29 Version : 3.6.9 Release : 1.fc29 URL : https://github.com/sitaramc/gitolite Summary : Highly flexible server for git directory version tracker Description : Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh's pubkey access and the authorized keys file, and the inspiration was an older program called gitosis. Gitolite can restrict who can read from (clone/fetch) or write to (push) a repository. It can also restrict who can push to what branch or tag, which is very important in a corporate environment. Gitolite can be installed without requiring root permissions, and with no additional software than git itself and perl. It also has several other neat features described below and elsewhere in the doc/ directory. 3.6.9 [ 1 ] Bug #1629930 - CVE-2018-16976 gitolite3: gitolite: Improper restriction of access to a Git repository while migration [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1629930 su -c 'dnf upgrade --advisory FEDORA-2018-d0bac4ff3b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/
Change Log
References
Update Instructions
