From cb2e458a1913e3a42ddb8548e8bf5293d64df776 Mon Sep 17 00:00:00 2001 From: Todd Zullinger Date: Tue, 9 Mar 2021 13:42:18 -0500 Subject: [PATCH] update to 2.31.0-rc2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This release includes a fix for CVE-2021-21300¹ in addition to the other changes along the path to the final 2.31.0 release. Release notes: https://github.com/git/git/raw/v2.31.0-rc2/Documentation/RelNotes/2.31.0.txt ¹ Per the 2.17.6 release notes on CVE-2021-21300: On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), Git could be fooled into running remote code during a clone. --- git.spec | 7 +++++-- sources | 4 ++-- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/git.spec b/git.spec index 88fe928..00285af 100644 --- a/git.spec +++ b/git.spec @@ -93,11 +93,11 @@ %endif # Define for release candidates -%global rcrev .rc1 +%global rcrev .rc2 Name: git Version: 2.31.0 -Release: 0.1%{?rcrev}%{?dist} +Release: 0.2%{?rcrev}%{?dist} Summary: Fast Version Control System License: GPLv2 URL: https://git-scm.com/ @@ -1070,6 +1070,9 @@ rmdir --ignore-fail-on-non-empty "$testdir" %{?with_docs:%{_pkgdocdir}/git-svn.html} %changelog +* Tue Mar 09 2021 Todd Zullinger - 2.31.0-0.2.rc2 +- update to 2.31.0-rc2 + * Wed Mar 03 2021 Todd Zullinger - 2.31.0-0.1.rc1 - update to 2.31.0-rc1 diff --git a/sources b/sources index e769ca1..0c6d1b2 100644 --- a/sources +++ b/sources @@ -1,2 +1,2 @@ -SHA512 (git-2.31.0.rc1.tar.xz) = 80c662b8e4b1af901bf8506f252d88851675ded77e86688d8a28db1e31b389ff3ec2cafa8b0ce9c816973ec9b2fb2ab29b0ac56d80584d2bc49f3430a6af5eaf -SHA512 (git-2.31.0.rc1.tar.sign) = 063355f016f4349716206fb070fd8615b5b3f216c88f44c000e57e6941d25acfa5c0db8381587e7c175b1b1901ccb49cccbc5c3d95ec8623195b25d84f9e8949 +SHA512 (git-2.31.0.rc2.tar.xz) = 0e717c27320d6747e5f7c928765c91859a22f5a5de02a99bab2f0923283b5da2fd755a50ba527160ca23ffa8daf087dc4014441a58100cffbabe58fb7d9b64c3 +SHA512 (git-2.31.0.rc2.tar.sign) = 4630ddd6186f72363b1bb2c5ed6dfebf428a5f4079286c91cfa75c0ec1cc1ddaee40a739fad6dccf3ad6a001764ae031a7d538e7ab4349a473e3bc7d95047ad6