rpms/git-lfs
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import UBI git-lfs-3.6.1-4.el9_7

Browse Source
This commit is contained in:
eabdullin 2025-12-22 02:31:37 +00:00
parent 6de333d3d6
commit ba00a3e555
2 changed files with 8624 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8610
SOURCES/git-lfs-3.6.1-cve-2025-26625.patch Normal file
View File

File diff suppressed because it is too large Load Diff

15
SPECS/git-lfs.spec
View File

@ -9,7 +9,7 @@ Version: 3.6.1
%global gobuilddir %{_builddir}/%{name}-%{version}/_build %global gobuilddir %{_builddir}/%{name}-%{version}/_build
Name: git-lfs Name: git-lfs
Release: 3%{?dist} Release: 4%{?dist}
Summary: Git extension for versioning large files Summary: Git extension for versioning large files
License: MIT License: MIT
@ -21,6 +21,15 @@ Source1: README.Fedora
# Based on https://github.com/git-lfs/git-lfs/pull/5998 # Based on https://github.com/git-lfs/git-lfs/pull/5998
# Added logic that preserves original behavior of error messages and avoids the format string test failures # Added logic that preserves original behavior of error messages and avoids the format string test failures
Patch0: 0001-Use-constant-format-string.patch Patch0: 0001-Use-constant-format-string.patch
# Fixes CVE-2025-26625
# Backports all the commits from:
# https://github.com/git-lfs/git-lfs/compare/v3.7.0...v3.7.1
# With added test functions from:
# 91fc2280b5ea0c75d178c9fe289b428615c4f5f0
# 3d8f497ea50ef550d15907bcc91868e608e56c14
# And changes from:
# b490f91cfe5c53e67753feec18d62958decd3be9
Patch1: git-lfs-3.6.1-cve-2025-26625.patch
# Generated provides by vendor2provides.py # Generated provides by vendor2provides.py
# https://src.fedoraproject.org/rpms/syncthing/blob/603e4e03a92a7d704d199629dd85304018e8279d/f/vendor2provides.py # https://src.fedoraproject.org/rpms/syncthing/blob/603e4e03a92a7d704d199629dd85304018e8279d/f/vendor2provides.py
@ -160,6 +169,10 @@ PATH=%{buildroot}%{_bindir}:%{gobuilddir}/bin:$PATH \
%changelog %changelog
* Mon Dec 01 2025 Ondřej Pohořelský <opohorel@redhat.com> - 3.6.1-4
- Backport fix for CVE-2025-26625
- Resolves: RHEL-122431
* Mon Aug 11 2025 Ondřej Pohořelský <opohorel@redhat.com> - 3.6.1-3 * Mon Aug 11 2025 Ondřej Pohořelský <opohorel@redhat.com> - 3.6.1-3
- Add patch to fix build failures with Go 1.24< - Add patch to fix build failures with Go 1.24<
- Resolves: RHEL-106475 - Resolves: RHEL-106475