ELBA-2022-12648

ELBA-2022-12648 - cgit Bug Fix update

Type:	BUG
Severity:	NA
Release Date:	2022-01-12

Description

[1.2.3-8]
- update to git-2.34.1
- use %__make to run tests in %check

[1.2.3-7]
- update SELinux README
- simplify install commands
- improve httpd config file creation
- explicitly list the cgit cgi-bin script
- create /var/lib/git to improve SELinux compatibility

[1.2.3-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild

[1.2.3-5]
- include output of cgit.conf and git/config.mak in build logs
- explicitly disable expat, perl, python, and tcl/tk in git build
- use %{gpgverify} macro to verify tarball signature
- use %{build_cflags} and %{build_ldflags}
- preserve timestamps when running install
- clean up & improve dist conditionals
- remove %_python_bytecompile_extra
- limit *.py[co] %exclude to el7
- refresh highlight v3 patch
- use git to apply patches

[1.2.3-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

* Tue Dec 29 2020 Todd Zullinger
- update tar/zstd patch from upstream

* Sat Aug 08 2020 Todd Zullinger
- improve test suite's use of zstd to decode a tar file

[1.2.3-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.2.3-2]
- Fix string quoting for rpm >= 4.16

[1.2.3-1]
- update to 1.2.3

[1.2.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.2.2-1]
- update to 1.2.2
- adjust highlight requirement conditional for EL-7+

[1.2.1-5]
- add missing zlib-devel BuildRequires, fixes FTBFS (#1737005)

[1.2.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[1.2.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild

[1.2.1-2]
- use git's default, collision-detecting SHA1 implementation
- verify upstream GPG signatures in %prep

[1.2.1-1]
- Update to 1.2.1, fixes directory traversal vulnerability

[1.2-1]
- Update to 1.2
- Include contrib dir in docs
- Update example cgtirc settings

[1.1-12]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

[1.1-11]
- disable automatic compilation of *.py files outside of python sitelib
- use %bcond_(with|without) to toggle highlight
- use %autosetup macro
- drop crufty curl-devel conditional
- fix parallel make issues in docs
- simplify README.SELinux install
- use %bcond_(with|without) to handle httpd-filesystem
- avoid libcrypto.so requires
- run test suite in %check

* Mon Jun 04 2018 Todd Zullinger
- make config: drop redundant DESTDIR/INSTALL, add COPYTREE
- remove env shebang's from filter scripts

[1.1-10]
- Use https for source URLs
- Remove el5 conditionals
- Use cgit.conf and config.mak for cgit/git build options
- Drop obsolete %{buildroot} cleanup
- Add gcc and make BuildRequires

[1.1-9]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.1-8]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.1-7]
- Rebuild with binutils fix for ppc64le (#1475636)

[1.1-6]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.1-5]
- Require webserver on all dists (#1468839)

[1.1-4]
- Fix httpd requirements on epel7. Fixes bug #1468839

[1.1-3]
- suggest using correct selinux context (rhbz#1429790)

[1.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.1-1]
- Update to 1.1. Fixes bug #1397820

[1.0-2]
- ensure we inform about git bundling appropriately

[1.0-1]
- Update to 1.0

[0.12-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[0.12-1]
- Update to 0.12. Fixes bug #1298912
- Fixes CVE-2016-1899 CVE-2016-1900 CVE-2016-1901

[0.11.2-3]
- Fix up logic around webserver and httpd.
- On Fedora require webserver and httpd-filesystem
- On EPEL require httpd.

[0.11.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[0.11.2-1]
- Update to 0.11.2

[0.11.1-1]
- Update to 0.11.1

[0.11.0-1]
- Update to 0.11.0

[0.10.2-5]
- require 'any' 'webserver' instead of concrete 'httpd' (#1138599)

[0.10.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[0.10.2-3]
- currently epel-7-ppc64 does not have highlight package (#1117261)

[0.10.2-2]
- install README.SELinux documentation again (#1036123)
- generate cgit.conf for httpd >= 2.4 when needed

[0.10.2-1]
- Update to 0.10.2. Fixes bug #1114970

[0.10.1-4]
- Add patch to fix raw patch handling

[0.10.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[0.10.1-2]
- Include highlight styles in cgit.css

[0.10.1-1]
- Update to 0.10.1
- Correctly enable lua filters.

[0.10-1]
- Update to 0.10

[0.9.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[0.9.2-1]
- Update to 0.9.2, fixes CVE-2013-2117

[0.9.1-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[0.9.1-3]
- Fixed ldflags. Fixes bug 878611

[0.9.1-2]
- Add patch to use correct version of highlight for all branches except epel5

[0.9.1-1]
- Update to 0.9.1
- Fixes bug #870714 - CVE-2012-4548
- Fixes bug #820733 - CVE-2012-4465

[0.9.0.2-4]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[0.9.0.2-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[0.9.0.2-2]
- Fix potential XSS vulnerability in rename hint

[0.9.0.2-1]
- Update to 0.9.0.2

[0.9-1]
- Update to 0.9
- Fixes: CVE-2011-1027
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1027
- Generate and install man page and html docs
- Use libcurl-devel on RHEL >= 6
- Include example filter scripts
- Update example cgitrc

[0.8.2.1-5]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[0.8.2.1-4]
- Appy upstream git patch for CVE-2010-2542 (#618108)

[0.8.2.1-3]
- rebuilt with new openssl

[0.8.2.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[0.8.2.1-1]
- Update to 0.8.2.1

[0.8.2-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[0.8.2-1]
- Update to 0.8.2
- Drop upstreamed Makefile patch

[0.8.1-2]
- Rebuild with new openssl

[0.8.1-1]
- Initial package

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	cgit-1.2.3-8.el8.src.rpm	69a960804cd151664908b05f40a9bc96	-
	cgit-1.2.3-8.el8.aarch64.rpm	557a9f3fce51212bc02f811f4d83b7c6	-
Oracle Linux 8 (x86_64)	cgit-1.2.3-8.el8.src.rpm	69a960804cd151664908b05f40a9bc96	-
	cgit-1.2.3-8.el8.x86_64.rpm	c55fb90a8ace806d069b7cf40727dfe4	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team