pool/git
SHA256
11
0
Fork 2
Code Issues Pull Requests Activity

Accepting request 970347 from devel:tools:scm

Browse Source 
- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it

- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b

- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees

- Require nogroup group for %pre (bsc#1192023)

OBS-URL: https://build.opensuse.org/request/show/970347
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git?expand=0&rev=276
This commit is contained in:
Dominique Leuenberger
2022-04-15 22:14:08 +00:00
committed by Git OBS Bridge
parent aec78cff84
commit 6b8915c67b
7 changed files with 32 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
git.changes
View File

@@ -1,3 +1,28 @@
-------------------------------------------------------------------
Thu Apr 14 06:01:19 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
- git 2.35.3:
* usability fix-up for CVE-2022-24765 bsc#1198234:
'*' can be used as the value for the `safe.directory` variable
to signal that the user considers that any directory is safe.
* The code that was meant to parse the new `safe.directory`
configuration variable was not checking what configuration
variable was being fed to it
-------------------------------------------------------------------
Wed Apr 13 13:13:13 UTC 2022 - olaf@aepfle.de
- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
in journalctl -b
-------------------------------------------------------------------
Tue Apr 12 17:56:41 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
- git 2.35.2 (CVE-2022-24765, bsc#1198234):
* CVE-2022-24765: git may execute commands defined by other users
from unexpected worktrees
-------------------------------------------------------------------
Thu Mar 10 15:16:47 UTC 2022 - chris@computersalat.de
@@ -114,6 +139,7 @@ Wed Oct 20 16:32:02 UTC 2021 - Callum Farmer <gmbr3@opensuse.org>
- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)
-------------------------------------------------------------------
Wed Oct 13 18:09:43 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>