Skip to content

Conversation

@github-actions
Copy link

@github-actions github-actions bot commented Dec 1, 2022

This PR contains a snapshot of xena from upstream.

A recent change to git [1] introduced a new behaviour to work around a
CVE [2] that disallows any git operations in directories not owned by
the current user.

A fix was introduced for general checkouts, but it was not applied
to the plugins archive, resulting in PBR still not working as intended.

Fixed conflict added in I093620679016b37e1664c9fe4cf7559433e744b7.

[1] git/git@8959555
[2] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24765.

Closes-Bug: #1969096
Related-Bug: #1968877

Co-Authored-By: Mark Goddard <mark@stackhpc.com>
Co-Authored-By: Marcin Juszkiewicz <marcin.juszkiewicz+kolla@linaro.org>

Signed-off-by: Jakub Neumann <jneumann@cloudferro.com>
Change-Id: Ib3a37eebb29d975fc51a117cecdff74baafd8941
(cherry picked from commit 6be0068)
@github-actions github-actions bot requested a review from a team as a code owner December 1, 2022 11:04
@github-actions github-actions bot added automated Automated action performed by GitHub Actions synchronisation labels Dec 1, 2022
@markgoddard markgoddard closed this Dec 1, 2022
@markgoddard markgoddard reopened this Dec 1, 2022
@markgoddard markgoddard merged commit a1cce28 into stackhpc/xena Dec 1, 2022
@markgoddard markgoddard deleted the upstream/xena-2022-12-01 branch December 1, 2022 11:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated Automated action performed by GitHub Actions synchronisation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants