Bug 1369173 - Git is unable to use HTTP(S)-SSO because of fix for CVE-2011-2192 [el7]
Summary: Git is unable to use HTTP(S)-SSO because of fix for CVE-2011-2192 [el7]
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: git
Version: 7.3
Hardware: All
OS: Linux
high
high
Target Milestone: rc
: ---
Assignee: Petr Stodulka
QA Contact: Robin Hack
Lenka Špačková
URL:
Whiteboard:
Depends On: 1359176
Blocks: 1298243 1368384 1393870 1400961
TreeView+ depends on / blocked
 
Reported: 2016-08-22 15:10 UTC by Kamil Dudka
Modified: 2019-12-16 06:27 UTC (History)
8 users (show)

Fixed In Version: git-1.8.3.1-9.el7
Doc Type: Release Note
Doc Text:
*Git* can now be used with HTTP or HTTPS and SSO Since *libcurl* version 7.21.7, a new paramater for delegating Kerberos tickets is required because of CVE-2011-2192. Previously, *Git* did not provide a way to set such a parameter. As a consequence, using *Git* with Single Sign-On on HTTP or HTTPS connections failed. With this update, *Git* provides a new `http.delegation` configuration variable, which corresponds to the cURL `--delegation` parameter. Users need to set this parameter when delegation of Kerberos tickets is required.
Clone Of: 1368384
: 1428822 (view as bug list)
Environment:
Last Closed: 2017-08-01 20:52:19 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 2459491 0 None None None 2016-08-22 15:10:20 UTC
Red Hat Product Errata RHSA-2017:2004 0 normal SHIPPED_LIVE Moderate: git security and bug fix update 2017-08-01 18:33:36 UTC

Comment 10 errata-xmlrpc 2017-08-01 20:52:19 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:2004
Note You need to log in before you can comment on or make changes to this bug.