[ol7_optional_latest] git-daemon-1.8.3.1-23.el7_8.x86_64

The git dæmon for supporting git:// access to git repositories

Changelog (Show File list) (Show related packages)

• Mon May 25 2020 Vít Ondruch <vondruch@redhat.com> - 1.8.3.1-23

  - Prevent crafted URL containing new lines, empty host or lacks a scheme
    to cause credential leak.
    Resolves: CVE-2020-11008

• Thu Apr 09 2020 Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22

  - Crafted URL containing new lines can cause credential leak  
  - Resolves: CVE-2020-5260

• Wed Dec 18 2019 Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21

  - Fix CVE-2019-1387: remote code execution in recursive clones with nested
    submodules
    Resolves: CVE-2019-1387

• Fri Oct 19 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20

  - Fix CVE-2018-17456: arbitrary code execution via .gitmodules
    Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1

• Wed Aug 29 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19

  - Fix httpd modules path to be independent from system architecture.
  Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
  Resolves: #1213059

• Fri Jul 13 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18

  - Use the correct apache module directory in instaweb.
  - Apply the docs fixes to instaweb as well.

• Tue Jul 10 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17

  - Correctly return an error from fsck on encountering a .gitmodules symlink.
    This was broken in the debian 2.1.x backport and found by covscan.
    Fix the test to catch this.
  - Correct a typo in changelog.

• Mon Jul 02 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16

  - Remove EL-5 settings and old Fedora conditionals.
    Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
    2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
  - Fix builds using '--without docs'
  - Change git-instaweb default from lighttpd(not available in rhel7) to
    apache2.
  - Add requires for git-{instaweb,gnome-keyring} to pull them, when
    installing git-all.

• Tue Jun 19 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15

  - move instaweb to separate git-instaweb subpackage.
  	Resolves: #1213059
  - move gnome-keyring to a separate git-gnome-keyring subpackage.
  	Resolves: #1284081

• Mon Jun 18 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14

  - Backport fix for CVE-2018-11235
  - Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
    and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1