Blog

News and posts from the SCM-Manager team

CVE-2014-9390

Posted on 2014-12-23 by Sebastian Sdorra


CVE-2014-9390 affects git systems on case-insensitive filesystems, such as Windows and Mac OS. For more informations of CVE-2014-9390 please have a look at the git mailing list.

There are only two parts of SCM-Manager which are affected by CVE-2014-9390, the new import…


Posted in scm-manager, security


SCM-Manager 1.44

Posted on 2014-12-23 by Sebastian Sdorra


Version 1.44 of SCM-Manager is now available for download.

Downloadhttps://www.scm-manager.org/download/
Release noteshttps://bitbucket.org/sdorra/scm-manager/wiki/release-notes
Getting startedhttps://bitbucket.org/sdorra/scm-manager/wiki/getting-started


Posted in release, scm-manager


SCM-Manager 2 Milestone 1

Posted on 2014-12-13 by Sebastian Sdorra


After a long development time SCM-Manager 2 reaches milestone 1. Here are the main features of the first milestone of SCM-Manager 2:

Server

With version 2 SCM-Manager will switch to Semantic Versioning. All upcoming SCM-Manager 2 versions and plugins will use the MAJOR.MINOR…


Posted in release, scm-manager


Explore SCM-Manager Universe@Cloud

Posted on 2014-12-05 by Sebastian Sdorra


SCM-Manager has its own Universe. There it acts in the center of a bundle of ready to use open source software components.

Now the virtual appliance SCM-Manager Universe, which is developed by my partner TRIOLOGY, is available as a Cloud-Service. This highly scalable, most secure…


Posted in universe


Repository Import Wizard

Posted on 2014-12-02 by Sebastian Sdorra


SCM-Manager 1.43 main feature is a new repository import wizard. This new wizard supports three import methods:

  1. Import repositories from the repository directory (.scm/repositories/type). This method is supported by git, mercurial and subversion.
    directory-animated
  2. Import repositories from a remote url. This method is supported by git and mercurial.
    url-animated
  3. Import repositories from a bundle/dump (svndump). This method is supported by subversion.
    bundle-animated

Posted in scm-manager


SCM-Manager 1.43

Posted on 2014-12-01 by Sebastian Sdorra


Version 1.43 of SCM-Manager is now available for download.

Downloadhttps://www.scm-manager.org/download/
Release noteshttps://bitbucket.org/sdorra/scm-manager/wiki/release-notes
Getting startedhttps://bitbucket.org/sdorra/scm-manager/wiki/getting-started


Posted in release, scm-manager


scm-webhook-plugin 1.5

Posted on 2014-11-21 by Sebastian Sdorra


Version 1.5 of the scm-webhook-plugin is available for download.

Changes:

  • ability to send commit data as json post

Posted in plugins, workflow-plugins


Official docker image

Posted on 2014-11-21 by Sebastian Sdorra


The official SCM-Manager docker image has arrived the docker registry.

Here are some examples for the usage of the image:

# run the latest scm-manager version
docker run sdorra/scm-manager

# expose scm-manager http port
docker run -p 8080:8080 sdorra/scm-manager

# run a specific scm-manager version
# version 1.42 is currently the only available version
docker run -p 8080:8080 sdorra/scm-manager:1.42

# use a persitent volume
mkdir /var/lib/scm
chown 1000:1000 /var/lib/scm
docker run -v /var/lib/scm:/var/lib/scm -p 8080:8080 sdorra/scm-manager:1.42

Posted in scm-manager


SCM-Manager 1.42

Posted on 2014-10-20 by Sebastian Sdorra


Version 1.42 of SCM-Manager is now available for download.

Downloadhttps://www.scm-manager.org/download/
Release noteshttps://bitbucket.org/sdorra/scm-manager/wiki/release-notes
Getting startedhttps://bitbucket.org/sdorra/scm-manager/wiki/getting-started


Posted in release, scm-manager


SCM-Manager and the POODLE vulnerability

Posted on 2014-10-18 by Sebastian Sdorra


If you are using scm-server with a configured https connector, please be sure that you exclude the SSLv3 protocol to avoid the POODLE vulnerability.

Add the following xml elements to your https connector in your server-config.xml:

<Arg>
  <New class="org.eclipse.jetty.http.ssl.SslContextFactory">
    <Set name="excludeProtocols">
      <Array type="java.lang.String">
        <Item>SSLv2Hello</Item>
        <Item>SSLv3</Item>
      </Array>
    </Set>
  </New>
</Arg>

The complete connector section should now be…


Posted in scm-manager, security