[ol7_optional_latest] gitweb-1.8.3.1-21.el7_7.noarch

Simple web interface to track changes in git repositories

Changelog (Show File list) (Show related packages)

• Fri Oct 19 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20

  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1

• Wed Aug 29 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19

  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059

• Fri Jul 13 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18

  - Use the correct apache module directory in instaweb.
  - Apply the docs fixes to instaweb as well.

• Tue Jul 10 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17

  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.

• Mon Jul 02 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16

  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.

• Tue Jun 19 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15

  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081

• Mon Jun 18 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14

  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1

• Wed Sep 13 2017 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13

  - fall back to Basic auth if Negotiate fails
    Resolves: #1490998
  - handle request-pull when multiple tags point to the same commit
    Resolves: #1192146

• Fri Aug 11 2017 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-12

  - prevent command injection via malicious ssh URLs
    Resolves: CVE-2017-1000117

• Wed May 17 2017 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-11

  - dissalow repo names beginning with dash
    Resolves: CVE-2017-8386