From 5e188f3e1ec271d8578e76520f1563c0b806e8a34f5930c83273e48f3f9c3779 Mon Sep 17 00:00:00 2001
From: Dominique Leuenberger <dleuenberger@suse.com>
Date: Tue, 29 Mar 2016 07:54:40 +0000
Subject: [PATCH] Accepting request 379503 from devel:tools:scm

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/379503
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git?expand=0&rev=177
---
 git-2.7.3.tar.sign | Bin 543 -> 0 bytes
 git-2.7.3.tar.xz   |   3 ---
 git-2.7.4.tar.sign | Bin 0 -> 543 bytes
 git-2.7.4.tar.xz   |   3 +++
 git.changes        |  12 ++++++++++++
 git.spec           |   2 +-
 6 files changed, 16 insertions(+), 4 deletions(-)
 delete mode 100644 git-2.7.3.tar.sign
 delete mode 100644 git-2.7.3.tar.xz
 create mode 100644 git-2.7.4.tar.sign
 create mode 100644 git-2.7.4.tar.xz

diff --git a/git-2.7.3.tar.sign b/git-2.7.3.tar.sign
deleted file mode 100644
index 78dc8ba519b4351907f2effe1613fe12a6fbedeb2f06c73fc2084f418865f052..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 543
zcmV+)0^t3L0vrSY0RjL91p-##^KAeM2@tTg=!TZB=F3FX5B(I<<Hl1EHmgjKsD7O1
zVu@-o$PGgMR7f!ov2%uHL)%W2jVrHue{Kfz)fWy|&XKz-zI3acBRy^zT{f{&`V9GK
zugEU@u)pqCJ+!Dnbd>+U^&_+-8fEj2FbM0!m&D_mU%DP5&)T%nf9!1zuYQCE96i@h
z1~$)3l4Y!`v|JmJ8&B$kTTkxr8DLWolL9#KK`}01aB)K-uH<`Zsv*K)1aT!1#riai
zeAC##6g>Rs4rWh{^geZeJ`3YPnd^j$(6j&1LojiZO+rxp^w$R8u-=?o`5kqTKW*)|
zEzwg_87~DNo+r?!n0O6xs(-}aF;3Q_7Q}8&{!G)Omhu8FxJJr{Ga1CwfExM|GY4m@
z5`G=@ZPi%PC`@N<5{<`a@+)pYmLS4ew0se|aGCPVZ*N9!+VRB;>>shdJy@$X-s`{4
zc3|tx!0{E+htqIL29sDXy4xtgG|}_|ROb?Y*N7CP3A3vO)0y+f&i<49vZcatAkCLJ
zeJH75#y|KYxe<rm%o<)^U16w(F^+Ae;o&QH)c)mK7Em5V7o0#gjx97Yu-h9e?_q@J
zPeDrTrT}s2R#4KV8wNYUD)aW#OPLeyUjZvI^(>VBqNcD;`g-e`g4&xI*Ty%{%+d6m
hKNy;f^GMy{-VbB+k%t9{JfVrS+DBF7(A@9mFE{Kp4u1du

diff --git a/git-2.7.3.tar.xz b/git-2.7.3.tar.xz
deleted file mode 100644
index bebe1c2..0000000
--- a/git-2.7.3.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:89c467912d4740da2b40288f956251f0a1e276e28eecd28a6d776067103629b6
-size 3909636
diff --git a/git-2.7.4.tar.sign b/git-2.7.4.tar.sign
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..97a02d4979cefc3adb27deabbe9644ac5eab02c061900e83c39df7e28571a972
GIT binary patch
literal 543
zcmV+)0^t3L0vrSY0RjL91p-#<8ZH0|2@tTg=!TZB=F3%35C3&X7wRb!|AXOtu|jQq
z8mBD>i@pQQN?=tQ7Rx6->nVgi^dDe4ED<Am8Shb$^!$`0E+}`^H|!HPs~he4M9R>Y
zo*8i{<F*+LdNg-Lq3-$Dj8pDbXy+%dq%KDVtDtbOME)#sr=ezlB$U$8_KpUN4q4>V
zN3{G>#p1{XM&ymjHRbUyC|MU-b|o0rw<vmc%;!WcsdkvKwvp(&4SoCSqcGUn^6LCH
zzr11@U5eBni5=BuwNFeHmdvb3Si18W;EWtC1NemQ_OpJ>_Xh#1mP*r3fG2tO7s#Dn
zYp_gCtO(DEvD2P;mk7lizn4gkF2FB|!jw!h4pCU%E$#&ZAz8T^qTeg$ICm?!gM+D1
zF+O}W>&g~eHt1USucz=#&Iwxm+-ze{m!JLb#@6*pU~<D0(H~AM=!2I1haO4w&TNly
zwchO&GL;%^HH~IXnjv&~9<Cqo2c_0)1|+voJQq`nY{D$;-(tAu)Ou9n?=kZjcv8}_
zR!b$dAFO$Cf)3)8WejpaQJF=jcl6+!5L3e24)CYV&bke~cUBS8RcybPU?aWvVLGqx
z?J2yy()Qc3QE}jfMN!cMF1_#TtT!Jmi#-|)6Pu$@&!7YDGMW8IjEk7=vZ^{{gGyjv
hDGJ~AxJFXpW*^1$nqt(zXhBdbZ&pejowVfsX;#bu3RD09

literal 0
HcmV?d00001

diff --git a/git-2.7.4.tar.xz b/git-2.7.4.tar.xz
new file mode 100644
index 0000000..737a9ef
--- /dev/null
+++ b/git-2.7.4.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:dee574defbe05ec7356a0842ddbda51315926f2fa7e39c2539f2c3dcc52e457b
+size 3909636
diff --git a/git.changes b/git.changes
index b7a747a..57d29ff 100644
--- a/git.changes
+++ b/git.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Thu Mar 17 21:22:02 UTC 2016 - astieger@suse.com
+
+- git 2.7.4:
+  Fix remote code execution via buffer overflow (CVE-2016-2315,
+  CVE-2016-2324, bsc#971328)
+  * plug heap corruption holes
+  * catch integer overflow in the computation of pathname lengths
+  * get rid of the name_path API. Both of
+  These would have resulted in writing over an under-allocated
+  buffer when formulating pathnames while tree traversal.
+
 -------------------------------------------------------------------
 Fri Mar 11 08:38:09 UTC 2016 - astieger@suse.com
 
diff --git a/git.spec b/git.spec
index 6991f4e..9ee018e 100644
--- a/git.spec
+++ b/git.spec
@@ -26,7 +26,7 @@
 %endif
 
 Name:           git
-Version:        2.7.3
+Version:        2.7.4
 Release:        0
 Summary:        Fast, scalable, distributed revision control system
 License:        GPL-2.0