[SECURITY] Fedora 17 Update: gitolite3-3.04-4.fc17

updates at fedoraproject.org updates at fedoraproject.org
Thu Oct 18 00:30:04 UTC 2012


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-15731
2012-10-10 00:08:48
--------------------------------------------------------------------------------

Name        : gitolite3
Product     : Fedora 17
Version     : 3.04
Release     : 4.fc17
URL         : http://github.com/sitaramc/gitolite
Summary     : Highly flexible server for git directory version tracker
Description :
Gitolite allows a server to host many git repositories and provide access
to many developers, without having to give them real userids on the server.
The essential magic in doing this is ssh's pubkey access and the authorized
keys file, and the inspiration was an older program called gitosis.

Gitolite can restrict who can read from (clone/fetch) or write to (push) a
repository. It can also restrict who can push to what branch or tag, which
is very important in a corporate environment. Gitolite can be installed
without requiring root permissions, and with no additional software than git
itself and perl. It also has several other neat features described below and
elsewhere in the doc/ directory.

--------------------------------------------------------------------------------
Update Information:

Fix for path traversal vulnerability.
--------------------------------------------------------------------------------
ChangeLog:

--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update gitolite3' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list