-
Thu Apr 09 2020 Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22
- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-5260
-
Wed Dec 18 2019 Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21
- Fix CVE-2019-1387: remote code execution in recursive clones with nested
submodules
Resolves: CVE-2019-1387
-
Fri Oct 19 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20
- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1
-
Wed Aug 29 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19
- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059
-
Fri Jul 13 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18
- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.
-
Tue Jul 10 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17
- Correctly return an error from fsck on encountering a .gitmodules symlink.
This was broken in the debian 2.1.x backport and found by covscan.
Fix the test to catch this.
- Correct a typo in changelog.
-
Mon Jul 02 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16
- Remove EL-5 settings and old Fedora conditionals.
Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
installing git-all.
-
Tue Jun 19 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15
- move instaweb to separate git-instaweb subpackage.
Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
Resolves: #1284081
-
Mon Jun 18 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14
- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1
-
Wed Sep 13 2017 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13
- fall back to Basic auth if Negotiate fails
Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
Resolves: #1192146