{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Dylan Alex Simon discovered and reported a directory traversal flaw in the way Gitolite restricted access to admin defined commands (\"ADC\"). An authenticated attacker could execute arbitrary code with privileges of Gitolite server user using specially crafted command name.\r\n\r\nThe flaw does not affect default Gitolite installations. Users who have enabled ADC in their configurations are advised to install the updated package which includes a fix to resolve the issue.", "type": "security", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2011-02-16 10:30:10", "date_modified": "2011-02-21 14:45:33", "date_approved": null, "date_testing": "2011-02-16 17:25:23", "date_stable": "2011-02-23 01:33:02", "alias": "FEDORA-EPEL-2011-0365", "test_gating_status": null, "from_tag": null, "date_pushed": "2011-02-23 01:33:02", "meets_testing_requirements": false, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-EPEL-2011-0365", "title": "gitolite-1.5.7-2.1.el6", "version_hash": "0429208a9573f26d85738bc6d2b5ccf0b4a43451", "release": {"name": "EL-6", "long_name": "Fedora EPEL 6", "version": "6", "id_prefix": "FEDORA-EPEL", "branch": "el6", "dist_tag": "dist-6E-epel", "stable_tag": "dist-6E-epel", "testing_tag": "dist-6E-epel-testing", "candidate_tag": "dist-6E-epel-testing-candidate", "pending_signing_tag": "", "pending_testing_tag": "", "pending_stable_tag": "", "override_tag": "dist-6E-epel-override", "mail_template": "fedora_epel_legacy_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by lkundrak. ", "timestamp": "2011-02-16 10:30:11", "update_id": 5346, "user_id": 91, "id": 37690, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing", "timestamp": "2011-02-16 17:25:23", "update_id": 5346, "user_id": 91, "id": 37691, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me.", "timestamp": "2011-02-21 14:39:43", "update_id": 5346, "user_id": 231, "id": 37692, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "lkundrak", "email": "lrintel+fedora@redhat.com", "id": 231, "avatar": "https://seccdn.libravatar.org/avatar/f1712a906e0ca1ce5acfffef3bce7c124128931b0c994933594b7085a4d20a62?s=24&d=retro", "openid": "lkundrak.id.stg.fedoraproject.org", "groups": [{"name": "security_respons"}, {"name": "packager"}, {"name": "svnsystem-config-rootpassword"}, {"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "svnkf"}, {"name": "cvsl10n"}, {"name": "cvsredhat-config-keyboard"}, {"name": "cvssystem-config-keyboard"}, {"name": "gitperl-rpm2"}, {"name": "cvsfedora"}, {"name": "fedorabugs"}, {"name": "gitastronomy"}, {"name": "svnsystem-config-keyboard"}, {"name": "gitsystem-config-kdump"}, {"name": "network-manager-maint"}, {"name": "fedora-contributor"}, {"name": "qa"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by lkundrak. ", "timestamp": "2011-02-21 14:45:50", "update_id": 5346, "user_id": 91, "id": 37693, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable", "timestamp": "2011-02-23 01:33:02", "update_id": 5346, "user_id": 91, "id": 37694, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "gitolite-1.5.7-2.1.el6", "signed": true, "release_id": null, "type": "rpm", "epoch": null}], "bugs": [], "updateid": "FEDORA-EPEL-2011-0365", "karma": 1, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}