# Pass --without docs to rpmbuild if you don't want the documentation

%bcond_without docs

%global gitcoredir          %{_libexecdir}/git-core

# Use systemd instead of xinetd on Fedora 19+ and RHEL 7+

%if 0%{?fedora} >= 19 || 0%{?rhel} >= 7

%global use_systemd 1

%else

%global use_systemd 0

%endif

# Build gnome-keyring git-credential helper on Fedora and RHEL >= 7

%if 0%{?fedora} || 0%{?rhel} >= 7

%global gnome_keyring 1

%else

%global gnome_keyring 0

%endif

%if (0%{?fedora} && 0%{?fedora} < 19) || (0%{?rhel} && 0%{?rhel} < 7)

%global with_desktop_vendor_tag 1

%else

%global with_desktop_vendor_tag 0

%endif

Name:           git

Version:        1.8.3.1

Release:        20%{?dist}

Summary:        Fast Version Control System

License:        GPLv2

Group:          Development/Tools

URL:            http://git-scm.com/

Source0:        http://git-core.googlecode.com/files/%{name}-%{version}.tar.gz

Source2:        git-init.el

Source3:        git.xinetd.in

Source4:        git.conf.httpd

Source5:        git-gui.desktop

Source6:        gitweb.conf.in

Source12:       git@.service

Source13:       git.socket

Patch0:         git-1.5-gitweb-home-link.patch

# https://bugzilla.redhat.com/490602

Patch1:         git-cvsimport-Ignore-cvsps-2.2b1-Branches-output.patch

Patch5:         0001-git-subtree-Use-gitexecdir-instead-of-libexecdir.patch

# This fixes the build when python is enabled.  Needs discussion upstream to

# find a proper solution.

Patch6:         0001-Drop-DESTDIR-from-python-instlibdir.patch

# whole set is for https://bugzilla.redhat.com/show_bug.cgi?id=1273889

Patch7:         0001-submodule-allow-only-certain-protocols-for-submodule.patch

Patch8:         0002-transport-add-a-protocol-whitelist-environment-varia.patch

Patch9:         0003-transport-refactor-protocol-whitelist-code.patch

Patch10:        0004-http-limit-redirection-to-protocol-whitelist.patch

Patch11:        0005-http-limit-redirection-depth.patch

# various non-CVE bugs

Patch13:        0001-http-control-GSSAPI-credential-delegation.patch

Patch17:        0009-remote-curl-fall-back-to-Basic-auth-if-Negotiate-fai.patch

Patch18:        git-request-pull-fix.patch

# CVE

Patch12:        0001-Fix-CVE-2016-2315-CVE-2016-2324.patch

Patch14:        0007-git-prompt.patch

Patch15:        0008-Fix-CVE-2017-8386.patch

Patch16:        git-cve-2017-1000117.patch

Patch19:        git-cve-2018-11235.patch

Patch20:        0001-Switch-git-instaweb-default-to-apache.patch

Patch21:        git-cve-2018-17456.patch

Patch22:        git-cve-2018-17456-tests.patch

BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

%if %{with docs}

BuildRequires:  asciidoc >= 8.4.1

BuildRequires:  xmlto

%endif

BuildRequires:  desktop-file-utils

BuildRequires:  emacs

BuildRequires:  expat-devel

BuildRequires:  gettext

BuildRequires:  libcurl-devel

%if %{gnome_keyring}

BuildRequires:  libgnome-keyring-devel

%endif

BuildRequires:  pcre-devel

BuildRequires:  openssl-devel

BuildRequires:  zlib-devel >= 1.2

%if %{use_systemd}

# For macros

BuildRequires:  systemd

%endif

Requires:       less

Requires:       openssh-clients

Requires:       perl(Error)

Requires:       perl(Term::ReadKey)

Requires:       perl-Git = %{version}-%{release}

Requires:       rsync

Requires:       zlib >= 1.2

Provides:       git-core = %{version}-%{release}

Obsoletes:      git-core <= 1.5.4.3

# Obsolete git-arch

Obsoletes:      git-arch < %{version}-%{release}

%description

Git is a fast, scalable, distributed revision control system with an

unusually rich command set that provides both high-level operations

and full access to internals.

The git rpm installs the core tools with minimal dependencies.  To

install all git packages, including tools for integrating with other

SCMs, install the git-all meta-package.

%package all

Summary:        Meta-package to pull in all git tools

Group:          Development/Tools

BuildArch:      noarch

Requires:       git = %{version}-%{release}

Requires:       git-cvs = %{version}-%{release}

Requires:       git-email = %{version}-%{release}

Requires:       git-gui = %{version}-%{release}

Requires:       git-svn = %{version}-%{release}

Requires:       git-p4 = %{version}-%{release}

Requires:       gitk = %{version}-%{release}

Requires:       perl-Git = %{version}-%{release}

Requires:       emacs-git = %{version}-%{release}

Requires:       git-instaweb = %{version}-%{release}

Requires:       git-gnome-keyring = %{version}-%{release}

Obsoletes:      git <= 1.5.4.3

%description all

Git is a fast, scalable, distributed revision control system with an

unusually rich command set that provides both high-level operations

and full access to internals.

This is a dummy package which brings in all subpackages.

%package bzr

Summary:        Git tools for working with bzr repositories

Group:          Development/Tools

BuildArch:      noarch

Requires:       git = %{version}-%{release}

Requires:       bzr

%description bzr

%{summary}.

%package daemon

Summary:        Git protocol dæmon

Group:          Development/Tools

Requires:       git = %{version}-%{release}

%if %{use_systemd}

Requires:	systemd

Requires(post): systemd

Requires(preun): systemd

Requires(postun): systemd

%else

Requires:       xinetd

%endif

%description daemon

The git dæmon for supporting git:// access to git repositories

%package -n gitweb

Summary:        Simple web interface to git repositories

Group:          Development/Tools

BuildArch:      noarch

Requires:       git = %{version}-%{release}

%description -n gitweb

Simple web interface to track changes in git repositories

%package hg

Summary:        Git tools for working with mercurial repositories

Group:          Development/Tools

BuildArch:      noarch

Requires:       git = %{version}-%{release}

Requires:       mercurial

%description hg

%{summary}.

%package p4

Summary:        Git tools for working with Perforce depots

Group:          Development/Tools

BuildArch:      noarch

BuildRequires:  python

Requires:       git = %{version}-%{release}

%description p4

%{summary}.

%package svn

Summary:        Git tools for importing Subversion repositories

Group:          Development/Tools

Requires:       git = %{version}-%{release}, subversion, perl(Term::ReadKey)

%description svn

Git tools for importing Subversion repositories.

%package cvs

Summary:        Git tools for importing CVS repositories

Group:          Development/Tools

BuildArch:      noarch

Requires:       git = %{version}-%{release}, cvs

Requires:       cvsps

Requires:	perl-DBD-SQLite

%description cvs

Git tools for importing CVS repositories.

%package email

Summary:        Git tools for sending email

Group:          Development/Tools

BuildArch:      noarch

Requires:       git = %{version}-%{release}, perl-Git = %{version}-%{release}

Requires:       perl(Authen::SASL)

Requires:       perl(Net::SMTP::SSL)

%description email

Git tools for sending email.

%package gui

Summary:        Git GUI tool

Group:          Development/Tools

BuildArch:      noarch

Requires:       git = %{version}-%{release}, tk >= 8.4

Requires:       gitk = %{version}-%{release}

%description gui

Git GUI tool.

%package -n gitk

Summary:        Git revision tree visualiser

Group:          Development/Tools

BuildArch:      noarch

Requires:       git = %{version}-%{release}, tk >= 8.4

%description -n gitk

Git revision tree visualiser.

%package -n perl-Git

Summary:        Perl interface to Git

Group:          Development/Libraries

BuildArch:      noarch

Requires:       git = %{version}-%{release}

BuildRequires:  perl(Error), perl(ExtUtils::MakeMaker)

Requires:       perl(Error)

Requires:       perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))

%description -n perl-Git

Perl interface to Git.

%package -n perl-Git-SVN

Summary:        Perl interface to Git::SVN

Group:          Development/Libraries

BuildArch:      noarch

Requires:       git = %{version}-%{release}

Requires:       perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))

%description -n perl-Git-SVN

Perl interface to Git.

%package -n emacs-git

Summary:        Git version control system support for Emacs

Group:          Applications/Editors

Requires:       git = %{version}-%{release}

BuildArch:      noarch

Requires:       emacs(bin) >= %{_emacs_version}

%description -n emacs-git

%{summary}.

%package -n emacs-git-el

Summary:        Elisp source files for git version control system support for Emacs

Group:          Applications/Editors

BuildArch:      noarch

Requires:       emacs-git = %{version}-%{release}

%description -n emacs-git-el

%{summary}.

%package instaweb

Summary:        Repository browser in gitweb

Group:          Development/Tools

BuildArch:      noarch

# to get the definition of _httpd_moddir

BuildRequires:  httpd-devel

Requires:       git = %{version}-%{release}

Requires:       gitweb = %{version}-%{release}

Requires:       mod_ssl

Requires:       httpd

%description instaweb

A simple script to set up gitweb and a web server for browsing the local repository.

%if %{gnome_keyring}

%package gnome-keyring

Summary:        Git module for working with gnome-keyring

BuildRequires:  libgnome-keyring-devel

Requires:       git = %{version}-%{release}

Requires:       gnome-keyring

%description gnome-keyring

%{summary}.

%endif

%prep

%setup -q

%patch0 -p1

%patch1 -p1

%patch5 -p1

%patch6 -p1

%patch7 -p1

%patch8 -p1

%patch9 -p1

%patch10 -p1

%patch11 -p1

%patch12 -p1

%patch13 -p1

%patch14 -p1

%patch15 -p1

%patch16 -p1

%patch17 -p1

%patch18 -p1

%patch19 -p1

%patch20 -p1

%patch21 -p1

%patch22 -p1

chmod a+x t/t0011-hashmap.sh t/t1307-config-blob.sh t/t4139-apply-escape.sh t/t7415-submodule-names.sh t/t7416-submodule-dash-url.sh t/t7417-submodule-path-url.sh

# Use these same options for every invocation of 'make'.

# Otherwise it will rebuild in %%install due to flags changes.

cat << \EOF > config.mak

V = 1

CFLAGS = %{optflags}

BLK_SHA1 = 1

NEEDS_CRYPTO_WITH_SSL = 1

USE_LIBPCRE = 1

ETC_GITCONFIG = %{_sysconfdir}/gitconfig

DESTDIR = %{buildroot}

INSTALL = install -p

GITWEB_PROJECTROOT = %{_var}/lib/git

GNU_ROFF = 1

htmldir = %{_docdir}/%{name}-%{version}

prefix = %{_prefix}

gitwebdir = %{_var}/www/git

EOF

%if "%{gitcoredir}" == "%{_bindir}"

echo gitexecdir = %{_bindir} >> config.mak

%endif

# Filter bogus perl requires

# packed-refs comes from a comment in contrib/hooks/update-paranoid

# YAML::Any is optional and not available on el5

cat << \EOF > %{name}-req

#!/bin/sh

%{__perl_requires} $* |\

sed -e '/perl(packed-refs)/d'

EOF

%global __perl_requires %{_builddir}/%{name}-%{version}/%{name}-req

chmod +x %{__perl_requires}

%build

sh configure --with-c-compiler=gcc

make %{?_smp_mflags} git-daemon LDFLAGS="-pie -Wl,-z,relro,-z,now" CFLAGS="$RPM_OPT_FLAGS -fPIC"

make %{?_smp_mflags} all -o git-daemon

make %{?_smp_mflags} %{?with_docs:doc}

make -C contrib/emacs

%if %{gnome_keyring}

make -C contrib/credential/gnome-keyring/

%endif

make -C contrib/subtree/

# Remove shebang from bash-completion script

sed -i '/^#!bash/,+1 d' contrib/completion/git-completion.bash

%install

rm -rf %{buildroot}

make %{?_smp_mflags} INSTALLDIRS=vendor install -o git-daemon

make %{?_smp_mflags} INSTALLDIRS=vendor %{?with_docs:install-doc} -o git-daemon

%global elispdir %{_emacs_sitelispdir}/git

make -C contrib/emacs install \

    emacsdir=%{buildroot}%{elispdir}

for elc in %{buildroot}%{elispdir}/*.elc ; do

    install -pm 644 contrib/emacs/$(basename $elc .elc).el \

    %{buildroot}%{elispdir}

done

install -Dpm 644 %{SOURCE2} \

    %{buildroot}%{_emacs_sitestartdir}/git-init.el

%if %{gnome_keyring}

install -pm 755 contrib/credential/gnome-keyring/git-credential-gnome-keyring \

    %{buildroot}%{gitcoredir}

# Remove built binary files, otherwise they will be installed in doc

make -C contrib/credential/gnome-keyring/ clean

%endif

make -C contrib/subtree install

%if %{with docs}

make -C contrib/subtree install-doc

%endif

mkdir -p %{buildroot}%{_sysconfdir}/httpd/conf.d

install -pm 0644 %{SOURCE4} %{buildroot}%{_sysconfdir}/httpd/conf.d/git.conf

sed "s|@PROJECTROOT@|%{_var}/lib/git|g" \

    %{SOURCE6} > %{buildroot}%{_sysconfdir}/gitweb.conf

find %{buildroot} -type f -name .packlist -exec rm -f {} ';'

find %{buildroot} -type f -name '*.bs' -empty -exec rm -f {} ';'

find %{buildroot} -type f -name perllocal.pod -exec rm -f {} ';'

# Remove remote-helper python libraries and scripts, these are not ready for

# use yet

rm -rf %{buildroot}%{python_sitelib} %{buildroot}%{gitcoredir}/git-remote-testgit

# git-archimport is not supported

find %{buildroot} Documentation -type f -name 'git-archimport*' -exec rm -f {} ';'

exclude_re="archimport|email|git-citool|git-cvs|git-daemon|git-gui|git-remote-bzr|git-remote-hg|gitk|p4|svn|instaweb|gnome-keyring"

(find %{buildroot}{%{_bindir},%{_libexecdir}} -type f | grep -vE "$exclude_re" | sed -e s@^%{buildroot}@@) > bin-man-doc-files

(find %{buildroot}{%{_bindir},%{_libexecdir}} -mindepth 1 -type d | grep -vE "$exclude_re" | sed -e 's@^%{buildroot}@%dir @') >> bin-man-doc-files

(find %{buildroot}%{perl_vendorlib} -type f | sed -e s@^%{buildroot}@@) > perl-git-files

(find %{buildroot}%{perl_vendorlib} -mindepth 1 -type d | sed -e 's@^%{buildroot}@%dir @') >> perl-git-files

# Split out Git::SVN files

grep Git/SVN perl-git-files > perl-git-svn-files

sed -i "/Git\/SVN/ d" perl-git-files

%if %{with docs}

(find %{buildroot}%{_mandir} -type f | grep -vE "$exclude_re|Git" | sed -e s@^%{buildroot}@@ -e 's/$/*/' ) >> bin-man-doc-files

%else

rm -rf %{buildroot}%{_mandir}

%endif

mkdir -p %{buildroot}%{_var}/lib/git

%if %{use_systemd}

mkdir -p %{buildroot}%{_unitdir}

cp -a %{SOURCE12} %{SOURCE13} %{buildroot}%{_unitdir}

%else

mkdir -p %{buildroot}%{_sysconfdir}/xinetd.d

perl -p \

    -e "s|\@GITCOREDIR\@|%{gitcoredir}|g;" \

    -e "s|\@BASE_PATH\@|%{_var}/lib/git|g;" \

    %{SOURCE3} > %{buildroot}%{_sysconfdir}/xinetd.d/git

%endif

# Install bzr and hg remote helpers from contrib

install -pm 755 contrib/remote-helpers/git-remote-{bzr,hg} %{buildroot}%{gitcoredir}

# Setup bash completion

mkdir -p %{buildroot}%{_sysconfdir}/bash_completion.d

install -pm 644 contrib/completion/git-completion.bash %{buildroot}%{_sysconfdir}/bash_completion.d/git

# Install tcsh completion

mkdir -p %{buildroot}%{_datadir}/git-core/contrib/completion

install -pm 644 contrib/completion/git-completion.tcsh \

    %{buildroot}%{_datadir}/git-core/contrib/completion/

# Move contrib/hooks out of %%docdir and make them executable

mkdir -p %{buildroot}%{_datadir}/git-core/contrib

mv contrib/hooks %{buildroot}%{_datadir}/git-core/contrib

chmod +x %{buildroot}%{_datadir}/git-core/contrib/hooks/*

pushd contrib > /dev/null

ln -s ../../../git-core/contrib/hooks

popd > /dev/null

# Install git-prompt.sh

mkdir -p %{buildroot}%{_datadir}/git-core/contrib/completion

install -pm 644 contrib/completion/git-prompt.sh \

    %{buildroot}%{_datadir}/git-core/contrib/completion/

# install git-gui .desktop file

desktop-file-install \

%if %{with_desktop_vendor_tag}

  --vendor fedora \

%endif

  --dir=%{buildroot}%{_datadir}/applications %{SOURCE5}

# find translations

%find_lang %{name} %{name}.lang

cat %{name}.lang >> bin-man-doc-files

# quiet some rpmlint complaints

chmod -R g-w %{buildroot}

find %{buildroot} -name git-mergetool--lib | xargs chmod a-x

rm -f {Documentation/technical,contrib/emacs,contrib/credential/gnome-keyring}/.gitignore

chmod a-x Documentation/technical/api-index.sh

find contrib -type f | xargs chmod -x

%check

# Tests to skip on all releases and architectures

# t9001-send-email - Can't locate Data/Dumper.pm in @INC - prbly missing dep

GIT_SKIP_TESTS="t9001"

export GIT_SKIP_TESTS

# Set LANG so various UTF-8 tests are run

export LANG=en_US.UTF-8

make test

%clean

rm -rf %{buildroot}

%if %{use_systemd}

%post daemon

%systemd_post git@.service

%preun daemon

%systemd_preun git@.service

%postun daemon

%systemd_postun_with_restart git@.service

%endif

%files -f bin-man-doc-files

%defattr(-,root,root)

%{_datadir}/git-core/

%doc README COPYING Documentation/*.txt Documentation/RelNotes contrib/

%{!?_without_docs: %doc Documentation/*.html Documentation/docbook-xsl.css}

%{!?_without_docs: %doc Documentation/howto Documentation/technical}

%{_sysconfdir}/bash_completion.d

%files bzr

%defattr(-,root,root)

%{gitcoredir}/git-remote-bzr

%files hg

%defattr(-,root,root)

%{gitcoredir}/git-remote-hg

%files p4

%defattr(-,root,root)

%{gitcoredir}/*p4*

%{gitcoredir}/mergetools/p4merge

%doc Documentation/*p4*.txt

%{?with_docs: %{_mandir}/man1/*p4*.1*}

%{?with_docs: %doc Documentation/*p4*.html }

%files svn

%defattr(-,root,root)

%{gitcoredir}/*svn*

%doc Documentation/*svn*.txt

%{?with_docs: %{_mandir}/man1/*svn*.1*}

%{?with_docs: %doc Documentation/*svn*.html }

%files cvs

%defattr(-,root,root)

%doc Documentation/*git-cvs*.txt

%{_bindir}/git-cvsserver

%{gitcoredir}/*cvs*

%{?with_docs: %{_mandir}/man1/*cvs*.1*}

%{?with_docs: %doc Documentation/*git-cvs*.html }

%files email

%defattr(-,root,root)

%doc Documentation/*email*.txt

%{gitcoredir}/*email*

%{?with_docs: %{_mandir}/man1/*email*.1*}

%{?with_docs: %doc Documentation/*email*.html }

%files gui

%defattr(-,root,root)

%{gitcoredir}/git-gui*

%{gitcoredir}/git-citool

%{_datadir}/applications/*git-gui.desktop

%{_datadir}/git-gui/

%{?with_docs: %{_mandir}/man1/git-gui.1*}

%{?with_docs: %doc Documentation/git-gui.html}

%{?with_docs: %{_mandir}/man1/git-citool.1*}

%{?with_docs: %doc Documentation/git-citool.html}

%files -n gitk

%defattr(-,root,root)

%doc Documentation/*gitk*.txt

%{_bindir}/*gitk*

%{_datadir}/gitk

%{?with_docs: %{_mandir}/man1/*gitk*.1*}

%{?with_docs: %doc Documentation/*gitk*.html }

%files -n perl-Git -f perl-git-files

%defattr(-,root,root)

%exclude %{_mandir}/man3/*Git*SVN*.3pm*

%{?with_docs:%{_mandir}/man3/*Git*.3pm*}

%files -n perl-Git-SVN -f perl-git-svn-files

%defattr(-,root,root)

%{?with_docs:%{_mandir}/man3/*Git*SVN*.3pm*}

%files -n emacs-git

%defattr(-,root,root)

%doc contrib/emacs/README

%dir %{elispdir}

%{elispdir}/*.elc

%{_emacs_sitestartdir}/git-init.el

%files -n emacs-git-el

%defattr(-,root,root)

%{elispdir}/*.el

%files daemon

%defattr(-,root,root)

%doc Documentation/*daemon*.txt

%if %{use_systemd}

%{_unitdir}/git.socket

%{_unitdir}/git@.service

%else

%config(noreplace)%{_sysconfdir}/xinetd.d/git

%endif

%{gitcoredir}/git-daemon

%{_var}/lib/git

%{?with_docs: %{_mandir}/man1/*daemon*.1*}

%{?with_docs: %doc Documentation/*daemon*.html}

%files -n gitweb

%defattr(-,root,root)

%doc gitweb/INSTALL gitweb/README

%config(noreplace)%{_sysconfdir}/gitweb.conf

%config(noreplace)%{_sysconfdir}/httpd/conf.d/git.conf

%{_var}/www/git/

%files instaweb

%defattr(-,root,root)

%{gitcoredir}/git-instaweb

%{?with_docs: %{_mandir}/man1/git-instaweb.1*}

%{?with_docs: %doc Documentation/git-instaweb.html}

%if %{gnome_keyring}

%files gnome-keyring

%defattr(-,root,root)

%{gitcoredir}/git-credential-gnome-keyring

%endif

%files all

# No files for you!

%changelog

* Fri Oct 19 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-20

- Fix CVE-2018-17456: arbitrary code execution via .gitmodules

  Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x

  and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1

* Wed Aug 29 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-19

- Fix httpd modules path to be independent from system architecture.

Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2

Resolves: #1213059

* Fri Jul 13 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-18

- Use the correct apache module directory in instaweb.

- Apply the docs fixes to instaweb as well.

* Tue Jul 10 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-17

- Correctly return an error from fsck on encountering a .gitmodules symlink.

  This was broken in the debian 2.1.x backport and found by covscan.

  Fix the test to catch this.

- Correct a typo in changelog.

* Mon Jul 02 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-16

- Remove EL-5 settings and old Fedora conditionals.

  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and

  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.

- Fix builds using '--without docs'

- Change git-instaweb default from lighttpd(not available in rhel7) to

  apache2.

- Add requires for git-{instaweb,gnome-keyring} to pull them, when

  installing git-all.

* Tue Jun 19 2018 Sebastian Kisela <skisela@redhat.com> - 1.8.3.1-15

- move instaweb to separate git-instaweb subpackage.

	Resolves: #1213059

- move gnome-keyring to a separate git-gnome-keyring subpackage.

	Resolves: #1284081

* Mon Jun 18 2018 Pavel Cahyna <pcahyna@redhat.com> - 1.8.3.1-14

- Backport fix for CVE-2018-11235

- Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x

  and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1

* Wed Sep 13 2017 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-13

- fall back to Basic auth if Negotiate fails

  Resolves: #1490998

- handle request-pull when multiple tags point to the same commit

  Resolves: #1192146

* Fri Aug 11 2017 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-12

- prevent command injection via malicious ssh URLs

  Resolves: CVE-2017-1000117

* Wed May 17 2017 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-11

- dissalow repo names beginning with dash

  Resolves: CVE-2017-8386

* Wed Mar 29 2017 Petr Stodulka <pstodulk@redhat.com> -1.8.3.1-10

- do not put unsanitized branch names in $PS1

  Resolves: CVE-2014-9938

* Fri Feb 24 2017 Petr Stodulka <pstodulk@redhat.com> -1.8.3.1-9

- add control of GSSAPI credential delegation to enable HTTP(S)-SSO

  authentication

  Resolves: #1369173

* Sat Mar 19 2016 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-8

- remove needles check of xmalloc from previous patch

  Resolves: #1318255

* Fri Mar 18 2016 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-7

- fix heap overflow CVE-2016-2315 CVE-2016-2324

  Resolves: #1318255

* Wed Oct 28 2015 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-6

- fix arbitrary code execution via crafted URLs

  Resolves: #1274737

* Fri Jun 19 2015 Petr Stodulka <pstodulk@redhat.com> - 1.8.3.1-5

- Rename the git.service into git@.service

  Resolves #1135071