CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

devel/gitolite22.3.1_1

Access control layer on top of git

Maintainer
ports@FreeBSD.org
Packages
gitolite2 2.3.1_1
Upstream
up to date
CPE
gitolite:gitolite from the port
WWW
https://github.com/sitaramc/gitolite/tree/g2
Links
cgit · VuXML

Unaddressed (3) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2018-206838.12019-01-10commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering u…
CVE-2018-169768.12018-09-12Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the process of being migrate…
CVE-2013-72035.52018-09-21gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (29)

Stefan Eßer (se) · 2.3.1_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.3.1_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Bernhard Froehlich (decke) · 2.3.1_1
devel/gitolite2: Fix CPE information because current one is deprecated

Approved by:    portmgr (blanket)
631a4c7494
Mathieu Arnold (mat) · 2.3.1_1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.3.1_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Mathieu Arnold (mat) · 2.3.1_1
Convert to UCL & cleanup pkg-message (categories d)
78d1aff1fc
Sunpoet Po-Chuan Hsieh (sunpoet) · 2.3.1_1
Use DISTVERSIONPREFIX instead of GH_TAGNAME

- Remove MASTER_SITES
b8e4454cc3
Mathieu Arnold (mat) · 2.3.1_1
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight
4e1b79a0a6
Dmitry Marakasov (amdmi3) · 2.3.1_1
- Add LICENSE_FILE - Switch to options helpers - Add CPE info
bdbe6a87d8
Frederic Culot (culot) · 2.3.1_1
- Reassign milki@'s ports after his commit bit was taken in for safekeeping
3b035073c3
Mathieu Arnold (mat) · 2.3.1_1
Update ports in the [bcd]* categories to not use GH_COMMIT.

With minor cleanups to make things simpler.

With hat:	portmgr
Sponsored by:	Absolight
c6457ffef4
Bryan Drewery (bdrewery) · 2.3.1_1
Update USE_GITHUB so it does not require GH_COMMIT.

Using this new scheme allows only setting the _tag_ or _commit hash_ in
GH_TAGNAME and not having to know the hash for a tag.  This scheme will
download a tarball that has a different checksum than before due to a changed
directory name for extraction.

The following MASTER_SITES are provided to retain the old checksum and
directory structure (that require GH_COMMIT):
  GH -> GHL
  GITHUB -> GITHUB_LEGACY

Differential Revision:	https://reviews.freebsd.org/D748
Submitted by:	amdmi3
Reviewed by:	mat, swills, antoine, bdrewery
With hat:	portmgr
5b5a90256d
Baptiste Daroussin (bapt) · 2.3.1_1
Cleanup plist
e52c1f9d98
Jimmy Olgeni (olgeni) · 2.3.1_1
Remove indefinite articles and trailing periods from COMMENT, plus minor COMMENT typos and surrounding whitespace fixes. Categories D-F.

CR:		D196
Approved by:	portmgr (bapt)
76c7f8fbe6
Jonathan Chu (milki) · 2.3.1_1
Add stagedir support to devel/gitolite2

- stagedir support
- milki local distfiles
- USES=shebangfix

Approved by:	swills (mentor)
af063620da
Jonathan Chu (milki) · 2.3.1_1
Update maintainer email address

Approved by:    swills (mentor)
19aceb599f
Steve Wills (swills) · 2.3.1_1
- Update to 2.3.1_1 - Fix package name collision - Use github master site

PR:		ports/183382
Submitted by:	milki <milki@rescomp.berkeley.edu> (maintainer)
a3f0ef7a35
Baptiste Daroussin (bapt) · 2.3.1
Fix package name collision
a48d714ca6
Baptiste Daroussin (bapt) · 2.3.1
Add NO_STAGE all over the place in preparation for the staging support (cat: devel part 2)
34b7e6ee7e
Andrej Zverev (az) · 2.3.1
- convert to the new perl5 framework - convert USE_GMAKE to Uses

Approved by:	portmgr (bapt@, blanket)
6600d6be8a
Steve Wills (swills) · 2.3.1
- Convert to OptionsNG - Update master site

PR:		ports/177162
Submitted by:	milki <milki@rescomp.berkeley.edu> (maintainer)
d32fc48d82
Sylvio Cesar Teixeira (sylvio) · 2.3.1
- Update to 2.3.1

PR:		ports/168380
Submitted by:	Milki <milki@rescomp.berkeley.edu> (maintainer)
8d6930b5a6
Chris Rees (crees) · 2.3
- Connect legacy gitolite2 port to build

- Register CONFLICTS with latest gitolite port

PR:		ports/167440
Submitted by:	milki <milki@rescomp.berkeley.edu>
c6fa587533
Frederic Culot (culot) · 2.3
- Update to 2.3

Changes:	https://raw.github.com/sitaramc/gitolite/pu/doc/CHANGELOG
PR:		ports/165222
Submitted by:	milki <milki@rescomp.berkeley.edu> (maintainer)
e39165ef43
Jason Helfman (jgh) · 2.2.1
- Update to 2.2.1

PR:	ports/165022
Submitted by: maintainer, milki at rescomp.berkeley.edu
009b000fbd
Tim Bishop (tdb) · 2.2
- Update to 2.2

Changes:
https://github.com/sitaramc/gitolite/blob/pu/doc/CHANGELOG
https://github.com/sitaramc/gitolite/compare/v2.1...v2.2

PR:		ports/164809
Submitted by:	milki <milki@rescomp.berkeley.edu> (maintainer)
28e09ad0f8
Tim Bishop (tdb) · 2.1
- Update to 2.1

Changes:
https://groups.google.com/d/topic/gitolite/CzL4g1vuqbY/discussion
https://github.com/sitaramc/gitolite/compare/v2.0.3...v2.1

PR:		ports/161147
Submitted by:	milki <milki@rescomp.berkeley.edu> (maintainer)
fbf0a0efc6
Dennis Herrmann (dhn) · 2.0.3
- Update to 2.0.3

PR:		ports/160940
Submitted by:	milki <milki@rescomp.berkeley.edu> (maintainer)
d63c7f208f
Tim Bishop (tdb) · 2.0.2
- Add new port gitolite:

Gitolite is an access control layer on top of git, which allows access control
down to the branch level, including specifying who can and cannot rewind a
given branch.

Gitolite lets you use a single user on a server to host many git repositories
and provide access to many developers, without having to give them real
userids on or shell access to the server. Authentication is most commonly done
using sshd, but you can also use httpd if you prefer.

Gitolite can restrict who can read from (clone/fetch) or write to (push) a
repository. It can also restrict who can push to what branch or tag, which is
very important in a corporate environment.

WWW: https://github.com/sitaramc/gitolite

PR:		ports/159260
Submitted by:	milki <milki at rescomp.berkeley.edu>
310b911d00