Update to 2.14.2

In addition to bug fixes, this release contains a security fix to harden
"git shell" against an unsafe user input, which "git cvsserver" copes
with poorly.

References:

http://seclists.org/oss-sec/2017/q3/534
https://public-inbox.org/git/xmqqy3p29ekj.fsf@gitster.mtv.corp.google.com/
This commit is contained in:
Todd Zullinger 2017-09-26 10:28:22 -04:00
parent 7c95c76e49
commit 5f2c65c7b0
2 changed files with 6 additions and 3 deletions

View File

@ -44,7 +44,7 @@
%endif %endif
Name: git Name: git
Version: 2.14.1 Version: 2.14.2
Release: 2%{?dist} Release: 2%{?dist}
Summary: Fast Version Control System Summary: Fast Version Control System
License: GPLv2 License: GPLv2
@ -730,6 +730,9 @@ rm -rf %{buildroot}
# No files for you! # No files for you!
%changelog %changelog
* Tue Sep 26 2017 Todd Zullinger <tmz@pobox.com> - 2.14.2-2
- Update to 2.14.2
* Thu Aug 10 2017 Todd Zullinger <tmz@pobox.com> - 2.14.1-2 * Thu Aug 10 2017 Todd Zullinger <tmz@pobox.com> - 2.14.1-2
- Rebuild for rpm-4.14 bug (#1480407) - Rebuild for rpm-4.14 bug (#1480407)

View File

@ -1,2 +1,2 @@
SHA512 (git-2.14.1.tar.xz) = bee35ad9c6a0d0588045ec2fe5f6987cb1eeb3961cdf33cd9b51ae52017969131ea4ec09908f9b30944f85b0daa99614fb42c248c9c8dac5f21a90e2866c33b4 SHA512 (git-2.14.2.tar.xz) = fe99486e0aef8d73dace3081bbd62bc6d08bc13868b98c905f7833458fdfc464eea504ae2961f4a2f38892cb0e76b533a50a2cacdf07c9ad9f8106e7ac1c353c
SHA512 (git-2.14.1.tar.sign) = 695509fa3f8f66beb6048682914873ee445bfc9e87192cdeced060c6088681f1cf6dc292c0831a1313c294981b77c99f4bd2da586e0bbb35db1169f42b71549c SHA512 (git-2.14.2.tar.sign) = 0f905e6c1dc0473f1241031c381932ba4d51a1a907340e3fbfc96edf2c730518f68ae044ca29b448fa66260d710ec6834511ab9fcc27cdd9444f0c0b6980ee50