[ol7_optional_latest] git-daemon-1.8.3.1-22.el7_8.x86_64

Name:	git-daemon
Version:	1.8.3.1
Release:	22.el7_8
Architecture:	x86_64
Group:	Development/Tools
Size:	840438
License:	GPLv2
RPM:	git-daemon-1.8.3.1-22.el7_8.x86_64.rpm
Source RPM:	git-1.8.3.1-22.el7_8.src.rpm
Build Date:	Tue Apr 21 2020
Build Host:	jenkins-10-147-72-125-0df84fbc-5d1c-4c2f-97d0-9b9bfadb57bc.appad3iad.osdevelopmeniad.oraclevcn.com
Vendor:	Oracle America
URL:	http://git-scm.com/
Summary:	Git protocol dæmon
Description:	The git dæmon for supporting git:// access to git repositories

Changelog (Show File list) (Show related packages)

Thu Apr 09 2020 Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-22

- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260

Wed Dec 18 2019 Ondrej Pohorelsky <opohorel@redhat.com> - 1.8.3.1-21

- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387

Fri Oct 19 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20

- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
  and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1

Wed Aug 29 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19

- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059

Fri Jul 13 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18

- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.

Tue Jul 10 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17

- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.

Mon Jul 02 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16

- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.

Tue Jun 19 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15

- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081

Mon Jun 18 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14

- Backport fix for CVE-2018-11235
- Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
  and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1

Wed Sep 13 2017 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13

- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146