Blog

CVE-2014-9390 affects git systems on case-insensitive filesystems, such as Windows and Mac OS. For more informations of CVE-2014-9390 please have a look at the git mailing list.

There are only two parts of SCM-Manager which are affected by CVE-2014-9390, the new import…

Version 1.44 of SCM-Manager is now available for download.

Download: https://www.scm-manager.org/download/
Release notes: https://bitbucket.org/sdorra/scm-manager/wiki/release-notes
Getting started: https://bitbucket.org/sdorra/scm-manager/wiki/getting-started

After a long development time SCM-Manager 2 reaches milestone 1. Here are the main features of the first milestone of SCM-Manager 2:

Server

With version 2 SCM-Manager will switch to Semantic Versioning. All upcoming SCM-Manager 2 versions and plugins will use the MAJOR.MINOR…

SCM-Manager has its own Universe. There it acts in the center of a bundle of ready to use open source software components.

Now the virtual appliance SCM-Manager Universe, which is developed by my partner TRIOLOGY, is available as a Cloud-Service. This highly scalable, most secure…

SCM-Manager 1.43 main feature is a new repository import wizard. This new wizard supports three import methods:

1. Import repositories from the repository directory (.scm/repositories/type). This method is supported by git, mercurial and subversion.
   
2. Import repositories from a remote url. This method is supported by git and mercurial.
   
3. Import repositories from a bundle/dump (svndump). This method is supported by subversion.
   …

Version 1.43 of SCM-Manager is now available for download.

Download: https://www.scm-manager.org/download/
Release notes: https://bitbucket.org/sdorra/scm-manager/wiki/release-notes
Getting started: https://bitbucket.org/sdorra/scm-manager/wiki/getting-started

Version 1.5 of the scm-webhook-plugin is available for download.

Changes:

• ability to send commit data as json post

The official SCM-Manager docker image has arrived the docker registry.

• Source code
• Docker registry

Here are some examples for the usage of the image:

# run the latest scm-manager version
docker run sdorra/scm-manager

# expose scm-manager http port
docker run -p 8080:8080 sdorra/scm-manager

# run a specific scm-manager version
# version 1.42 is currently the only available version
docker run -p 8080:8080 sdorra/scm-manager:1.42

# use a persitent volume
mkdir /var/lib/scm
chown 1000:1000 /var/lib/scm
docker run -v /var/lib/scm:/var/lib/scm -p 8080:8080 sdorra/scm-manager:1.42

Version 1.42 of SCM-Manager is now available for download.

Download: https://www.scm-manager.org/download/
Release notes: https://bitbucket.org/sdorra/scm-manager/wiki/release-notes
Getting started: https://bitbucket.org/sdorra/scm-manager/wiki/getting-started

If you are using scm-server with a configured https connector, please be sure that you exclude the SSLv3 protocol to avoid the POODLE vulnerability.

Add the following xml elements to your https connector in your server-config.xml:

<Arg>
  <New class="org.eclipse.jetty.http.ssl.SslContextFactory">
    <Set name="excludeProtocols">
      <Array type="java.lang.String">
        <Item>SSLv2Hello</Item>
        <Item>SSLv3</Item>
      </Array>
    </Set>
  </New>
</Arg>

The complete connector section should now be…