VDB

GCVE-110-MAGEIA-2019-58

GCVE-110-MAGEIA-2019-58
Advisory Published
Vulnetix · Advisory published January 31, 2019
In commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q, or -P (CVE-2018-20683).
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiagitolite0 (affected), 3.6.11-1.mga6 (unaffected), 0 (affected), 3.6.11-1.mga6 (unaffected)—
Mageiabackup-manager0 (affected), 0.7.15-2.1.mga7 (unaffected)—

Aliases

CVE-2018-20683

References

Updated gitolite packages fixes security vulnerability
advisory
Updated gitolite packages fixes security vulnerability
issue
Updated gitolite packages fixes security vulnerability
issue
Updated backup-manager package fixes invalid executable paths
advisory
Updated backup-manager package fixes invalid executable paths
issue

Browse GCVE Records

74,366 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›