Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
89
security advisoryfedoraupdateFedora 28: FEDORA-2019-b6ce519120 moderate: gitolite3 access control
3.6.11: https://github.com/sitaramc/gitolite/commit/b49133dc5f49b12807165ed2503 07213c1ac0a53. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-b6ce519120 2019-01-19 01:54:15.524809 --------------------------------------------------------------------------------Name : gitolite3 Product : Fedora 28 Version : 3.6.11 Release : 1.fc28 URL : https://github.com/sitaramc/gitolite Summary : Highly flexible server for git directory version tracker Description : Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh's pubkey access and the authorized keys file, and the inspiration was an older program called gitosis. Gitolite can restrict who can read from (clone/fetch) or write to (push) a repository. It can also restrict who can push to what branch or tag, which is very important in a corporate environment. Gitolite can be installed without requiring root permissions, and with no additional software than git itself and perl. It also has several other neat features described below and elsewhere in the doc/ directory. --------------------------------------------------------------------------------Update Information: 3.6.11: https://github.com/sitaramc/gitolite/commit/b49133dc5f49b12807165ed2503 07213c1ac0a53 --------------------------------------------------------------------------------ChangeLog: * Tue Jan 8 2019 Gwyn Ciesla - 1:3.6.11-1 - 3.6.11. * Thu Oct 4 2018 Gwyn Ciesla - 1:3.6.10-1 - 3.6.10. * Tue Sep 11 2018 Gwyn Ciesla - 1:3.6.9-1 - Latest upstream. * Tue Jul 17 2018 Gwyn Ciesla - 1:3.6.8-1 - Latest upstream. * Fri Jul 13 2018 Fedora Release Engineering - 1:3.6.7-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Jun 27 2018 Jitka Plesnikova - 1:3.6.7-6 - Perl 5.28 rebuild * Tue Apr 24 2018Pierre-Yves Chibon - 1:3.6.7-5 - Back upstream patch making gitolite respect the ALLOW_ORPHAN_GL_CONF configuration variabe - Include the compile-1 command upstream brought in Fedora in: https://github.com/sitaramc/gitolite/commit/afb8afa14a892895dc48664c6526351cb --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-b6ce519120' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Jan 19, 2019
Fedora
89
security advisoryfedoraupdateFedora 27: 2018-7993dea41b Critical: Gitolite3 Access Control
3.6.9. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-7993dea41b 2018-09-22 19:45:29.696836 --------------------------------------------------------------------------------Name : gitolite3 Product : Fedora 27 Version : 3.6.9 Release : 1.fc27 URL : https://github.com/sitaramc/gitolite Summary : Highly flexible server for git directory version tracker Description : Gitolite allows a server to host many git repositories and provide access to many developers, without having to give them real userids on the server. The essential magic in doing this is ssh's pubkey access and the authorized keys file, and the inspiration was an older program called gitosis. Gitolite can restrict who can read from (clone/fetch) or write to (push) a repository. It can also restrict who can push to what branch or tag, which is very important in a corporate environment. Gitolite can be installed without requiring root permissions, and with no additional software than git itself and perl. It also has several other neat features described below and elsewhere in the doc/ directory. --------------------------------------------------------------------------------Update Information: 3.6.9 --------------------------------------------------------------------------------ChangeLog: * Tue Sep 11 2018 Gwyn Ciesla - 1:3.6.9-1 - Latest upstream. * Tue Jul 17 2018 Gwyn Ciesla - 1:3.6.8-1 - Latest upstream. * Fri Jul 13 2018 Fedora Release Engineering - 1:3.6.7-7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Wed Jun 27 2018 Jitka Plesnikova - 1:3.6.7-6 - Perl 5.28 rebuild * Tue Apr 24 2018 Pierre-Yves Chibon - 1:3.6.7-5 - Back upstream patch making gitolite respect the ALLOW_ORPHAN_GL_CONF configuration variabe - Include the compile-1 command upstream brought in Fedora in: https://github.com/sitaramc/gitolite/commit/afb8afa14a892895dc48664c6526351cb * Wed Feb 7 2018Fedora Release Engineering - 1:3.6.7-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1629930 - CVE-2018-16976 gitolite3: gitolite: Improper restriction of access to a Git repository while migration [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1629930 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-7993dea41b' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Sep 22, 2018
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!