Skip to content

Fix harvesting git components#517

Merged
mpcen merged 1 commit intoclearlydefined:masterfrom
qtomlinson:qt/fix_gitclone
Apr 12, 2023
Merged

Fix harvesting git components#517
mpcen merged 1 commit intoclearlydefined:masterfrom
qtomlinson:qt/fix_gitclone

Conversation

@qtomlinson
Copy link
Copy Markdown
Collaborator

@qtomlinson qtomlinson commented Mar 17, 2023

The latest node:16 docker image contains debian/git 1:2.20.1-2+deb10u8.  Change log at https://tracker.debian.org/pkg/git shows "[2022-12-13] Accepted git 1:2.20.1-2+deb10u5 (source) into oldstable (Sylvain Beucler)".  The related changes (https://tracker.debian.org/news/1398381/accepted-git-12201-2deb10u5-source-into-oldstable/) include fix for CVE-2022-24765.  It is also noted that "The above introduces new 'safe.directory' checks which may cause regressions: allow opt-out of such checks with 'safe.directory='"  This is the root cause for "fatal: detected dubious ownership in repository at " exception during harvesting git components. Fixed this by opting-out of such checks with 'safe.directory='

Task: #516

The latest node:16 docker image contains debian/git 1:2.20.1-2+deb10u8.  Change log at https://tracker.debian.org/pkg/git shows "[2022-12-13] Accepted git 1:2.20.1-2+deb10u5 (source) into oldstable (Sylvain Beucler)".  The related changes (https://tracker.debian.org/news/1398381/accepted-git-12201-2deb10u5-source-into-oldstable/) include fix for CVE-2022-24765.  It is also noted that "The above introduces new 'safe.directory' checks which may cause regressions: allow opt-out of such checks with 'safe.directory=*'"  This is the root cause for "fatal: detected dubious ownership in repository at " exception during harvesting git components.  Fixed this by opting-out of such checks with 'safe.directory=*'

Task: clearlydefined#516
@mpcen mpcen merged commit e08e46b into clearlydefined:master Apr 12, 2023
qtomlinson pushed a commit to qtomlinson/crawler that referenced this pull request Feb 6, 2024
@qtomlinson qtomlinson deleted the qt/fix_gitclone branch February 6, 2024 04:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants