gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running gitolite setup.
https://marc.info/?l=oss-security&m=138783069700756&w=2
https://lists.fedoraproject.org/pipermail/package-announce/2014-January/125611.html