From 12bcf65c76990b1ad079f6c7af6fa88c3e33c70a Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Thu, 19 Dec 2019 13:19:05 -0500 Subject: [PATCH] import git-2.18.2-1.el8_1 --- .git.metadata | 2 +- .gitignore | 2 +- SOURCES/git-2.18.1.tar.sign | Bin 566 -> 0 bytes SOURCES/git-2.18.2.tar.sign | Bin 0 -> 566 bytes SPECS/git.spec | 11 +++++++++-- 5 files changed, 11 insertions(+), 4 deletions(-) delete mode 100644 SOURCES/git-2.18.1.tar.sign create mode 100644 SOURCES/git-2.18.2.tar.sign diff --git a/.git.metadata b/.git.metadata index 42df035..ccb05e4 100644 --- a/.git.metadata +++ b/.git.metadata @@ -1,2 +1,2 @@ -c57084d534cc259c14371a4dbdaf0119933d8f41 SOURCES/git-2.18.1.tar.xz +db4ceed18908aafcdc563156d8c1cfd0bb3ae738 SOURCES/git-2.18.2.tar.xz 097b8da13939ac9f51f97a5659184c1d96fb0973 SOURCES/gpgkey-junio.asc diff --git a/.gitignore b/.gitignore index d32ef2a..3a3eec6 100644 --- a/.gitignore +++ b/.gitignore @@ -1,2 +1,2 @@ -SOURCES/git-2.18.1.tar.xz +SOURCES/git-2.18.2.tar.xz SOURCES/gpgkey-junio.asc diff --git a/SOURCES/git-2.18.1.tar.sign b/SOURCES/git-2.18.1.tar.sign deleted file mode 100644 index d2d8e10fa42b180b0de57b0f21b3cc9145aeee3c..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 566 zcmV-60?GY}0y6{v0SEvc79j-T@HVmj=OQ1+cy6IF)lyX7J)X4 zFY$rUETQ!aZ|v(cR{&QmrNpR&?yw23pIK;lnvb4U7)abZ0@py)*bJJL#0c%sINg$G zRXWsNiV`HU_`wcx>fLImd9SgcvhY}M?3G^waIFPe$v2%-viK^?;320&4MH{$W`5j< z1Y#3ct30R%D1vOb355ldGua4uQ4=azVylG*ekDOTuTX5xU!WIER z#P$Emil!WEb!eX-N#L7;nEd!V>M?z$Fu^9d|GU(&RR|iK6(j%An-L(h4Z3&gE^m(H ziJJK%a>o_~wh4UaYU~Q`wgHXPYs%&+aZg9Q_cyX~lZXN#rp$r?fo#&P@^R;Jo2N?k)q2G6DZ}5W)&GZ*4f-IbW*@&eA)XR454HsUK$bcOuUK z<0#~u^3_Q93teH|(eQ{d*BeI%qJk`jYTk8>=i)_Z3p`oei-g34yRRW{v6KEDE3E-+u z43<2w?mglH{E)v2vM)i4{9p_1$HvddoZ12xQW2g1IIp84Gw*c(&2iZ#iVY^@gz;2r ENn^JdhyVZp diff --git a/SOURCES/git-2.18.2.tar.sign b/SOURCES/git-2.18.2.tar.sign new file mode 100644 index 0000000000000000000000000000000000000000..8abd6c9a6db9b6403448220e4a77b8764dc13a39 GIT binary patch literal 566 zcmV-60?GY}0y6{v0SEvc79j-T@HVmj=OQ1+cs>CVVl@xrzXH>ks>WEdBp)Ju#qY_OI2C5-C=`cD!+rtPayp-$FY9 zI5d#Wm;(`nR{^;KiJr0x(@A&^^8nyjD+2fC>~Ce0L}lY@0qHP`_O{+DP& zF}qElIe0Ez{K+*>g==3LO|v{_GZCqsW^KD6fDU-;j(PASya(B+pw9W*Nn#!D+p2=D z#?3q?burSjS$6az0GKvG*TU9viN0Cr(0jEIcxo;!Iop0KcWneyGfF6%rNDZ4vi)PB zROmo$vgDQL*xL@aaPgGSF`l(TqRhDX@m#lHm~;6e+DgNj$VMm?)GIqJ8?(lR^v_Tq zhn6@7;4&ACl{g5XZ^X{pLn9mdK`}hm5#;MP;0V6BwM9ShD%Kf;HLj^v{5A6a zkmgD1c~;C_y!!i!fx_eDF*P|dp^UQrU^}CP zL{mKfPjw@lpTP|%6@Zv)cN}s}<`IOJKFkQScK?jQaqpo_e%YmU ELD$zCF8}}l literal 0 HcmV?d00001 diff --git a/SPECS/git.spec b/SPECS/git.spec index 00698f8..7682b74 100644 --- a/SPECS/git.spec +++ b/SPECS/git.spec @@ -102,8 +102,8 @@ #global rcrev .rc0 Name: %{?scl_prefix}git -Version: 2.18.1 -Release: 4%{?rcrev}%{?dist} +Version: 2.18.2 +Release: 1%{?rcrev}%{?dist} Summary: Fast Version Control System License: GPLv2 URL: https://git-scm.com/ @@ -961,6 +961,13 @@ make test || ./print-failed-test-output %{?with_docs:%{_pkgdocdir}/git-instaweb.html} %changelog +* Tue Dec 17 2019 Ondrej Pohorelsky - 2.18.2-1 +- Update to release 2.18.2 +- Remote code execution in recursive clones with nested submodules + Resolves: CVE-2019-1387 +- Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351, + CVE-2019-1352, CVE-2019-1353, CVE-2019-1354 + * Tue Jun 11 2019 Marcel Plch - 2.18.1-4 - Use HMAC from libcrypto instead of git's implementation - Resolves: rhbz#1619113