-
Thu Jun 11 2020 Ondrej Pohorelsky <opohorel@redhat.com> - 2.27.0-1
- Update to release 2.27.0
- Resolves: rhbz#1825114
-
Tue May 26 2020 Ondrej Pohorelsky <opohorel@redhat.com> - 2.26.2-1
- Update to release 2.26.2
- Resolves: rhbz#1825114
-
Wed Apr 22 2020 Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.4-1
- Update to release 2.18.4
- Resolves: CVE-2020-11008
-
Thu Apr 09 2020 Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-2
- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-5260
-
Tue Dec 17 2019 Ondrej Pohorelsky <opohorel@redhat.com> - 2.18.2-1
- Update to release 2.18.2
- Remote code execution in recursive clones with nested submodules
Resolves: CVE-2019-1387
- Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,
CVE-2019-1352, CVE-2019-1353, CVE-2019-1354
-
Tue Jun 11 2019 Marcel Plch <mplch@redhat.com> - 2.18.1-4
- Use HMAC from libcrypto instead of git's implementation
- Resolves: rhbz#1619113
-
Tue Dec 11 2018 Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-3
- apply upstream run-command PATH fix (CVE-2018-19486)
- config: document value 2 for protocol.version (upstream patch)
-
Thu Oct 11 2018 Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-2
- Fix build when apr-util does not pull in apr-util-bdb, adapt the existing Fedora condition.
Problem caused by changes in #1633973 and #1491151.
- Fix builds without docs and without cvs and/or p4 (from skisela)
- Fix smart-http test due to changes in cookie sort order in curl-7.61.1
-
Wed Oct 10 2018 Pavel Cahyna <pcahyna@redhat.com> - 2.18.1-1
- Update to release 2.18.1, fixes CVE-2018-17456: arbitrary code execution via .gitmodules
-
Thu Aug 02 2018 Pavel Cahyna <pcahyna@redhat.com> - 2.18.0-6
- use the same spec file as for SCL (rhscl-3.2-rh-git218-rhel-7)