smeagol-galore

Smeagol galore is not affected by Log4Shell, see d6c2f15 for details.

• Smeagol: 1.5.0-1-r1
• SCM-Manager: 2.20.0 + latest plugins
• Tomcat: 9.0.50

Images are now provided mainly via GitHub Container Registry, e.g. ghcr.io/schnatterer/smeagol-galore:1.5.0-1-r1, as docker sunsets their free tier of autobuild.

You might find older versions of smeagol galore on DockerHub, if they haven't been deleted by their image retention policy and new versions, depending of the status of my application to docker's open source program.

Starting with this release, the version number will follow the smeagol version.
In order to reflect changes that do not involve a change in smeagol, a release number is appended.

For example, this version 1.0.0-1-r1 means Smeagol 1.0.0-1, release 1.

Version 9.0.44 fixes CVE-2021-25329.

• Hyperlinks between Smeagol and SCM-Manager for a more convenient transition
• Customized and simplified login screen
• Persist smeagol's repo cache for faster loading times after restarts
• Upgrade to Smeagol version 0.7.0
• Upgrade to SCM-Manager version 2.15.1 and plugin upgrades
• Custom login screen message

Fixes CVE-2020-17527

Smeagol galore now

• runs in an embedded Tomcat, resulting in a much smaller image
• can acquire and renew lets encrypt certs
  Breaking Change: Certificates are now stored in /config/certs/$FQDN (see example

Software Versions:

• SCM-Manager 2.4.0
• Embedded Tomcat: 9.0.36
• JDK: 11.0.8

Major Changes!

• Upgrades to SCM-Manager 2.0.0, which bringt tons of new features, new UX, etc.
• Upgrades to Tomcat 9 and JDK11
• Now uses Apache Portable Runtime (APR) based Native library for Tomcat for TLS handling, which is much faster than the default Java implementation of Tomcat

Migration:

• See SCM-Manager: Migrate from v1 to v2
• With a small number of repos, it might be easiest to set up a new instance, create the repos there, and then push them via git into the new version.

Fixes 13 vulnerabilities in docker packages

Updates Tomcat to tomcat:8.0.53.

Fixes CVE-2018-8037 and CVE-2018-1336:
https://www.us-cert.gov/ncas/current-activity/2018/07/23/Apache-Releases-Security-Updates-Apache-Tomcat