From 98b9d6be0b7a64b5816f81980c3d690243c511acaa1cd76409fad7d45e6fb685 Mon Sep 17 00:00:00 2001
From: Dominique Leuenberger <dleuenberger@suse.com>
Date: Thu, 11 Oct 2018 09:46:47 +0000
Subject: [PATCH] Accepting request 640121 from devel:tools:scm

git 2.19.1 CVE-2018-17456 bsc#1110949

OBS-URL: https://build.opensuse.org/request/show/640121
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git?expand=0&rev=224
---
 git-2.19.0.tar.sign | Bin 566 -> 0 bytes
 git-2.19.0.tar.xz   |   3 ---
 git-2.19.1.tar.sign | Bin 0 -> 566 bytes
 git-2.19.1.tar.xz   |   3 +++
 git.changes         |   8 ++++++++
 git.spec            |   2 +-
 6 files changed, 12 insertions(+), 4 deletions(-)
 delete mode 100644 git-2.19.0.tar.sign
 delete mode 100644 git-2.19.0.tar.xz
 create mode 100644 git-2.19.1.tar.sign
 create mode 100644 git-2.19.1.tar.xz

diff --git a/git-2.19.0.tar.sign b/git-2.19.0.tar.sign
deleted file mode 100644
index c6cbdf5cfdb29b37ab945a296e997af404b87221df85bff068e202ad1827569c..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 566
zcmV-60?GY}0y6{v0SEvc79j-T@HVmj=OQ1+c<k@6wdjVHujb1I0$Y~L7XS(g5U{oA
zhL*49%M^DH|6lo=&$6f?V>j5sF`nzoASgglI=T{{;TY+KGDK8k6n6*>U9?z61lVuj
z1&=D*UKQ_i2*E>T{4$!qrS7de<T!8Y?2L^=WzqsMA$Sn@i?t`<2o7{3=`hW!a7;Sh
zey7t1g*F>wDp$j7G17N4&#m<iwp%dpvsi;OH9yw>+RLVUTT{1xa8(;f*!VxAH2j*e
zGJC=Y1;Q$oqU@VxkU@5mfXT>r#gVU!=^(C@uKtTt2GjZw&13cD^IFupg2W}Ro1W{;
z&w!^xL<T_s79Kk#95giz{5<5LvO2RkO|<W44qgxv1uvL(q~a1>z;6{`_%b5a2_v!@
zyB?61Z+A<}+4)DIq?BbK1fYOeq(^Uu@nfH-S9YBV*f3}i=oqa6TNsGwaNi^cNehP8
zOcJxCn)i)Bp;ORt!D3S&iR41N#H_o`h63*x3Bu<B)QBtcJYB3+9BkuxPwr*UKrZ#l
zwx|vW{}F79Or;}XTdOjLy#A<G?NKLsW0cgv*lfsw3-~bdSH=>THAn4MARhBGN*H-`
zxi#*p>?_dQE7w=)@0k%mS5vd2%v>zWp&C4>0j(=LtLIzuRGa@S!19fznp~lylRIp&
zi5UNN<^6O<m%?+wLEX!^;d+WWTQ4u1kipEl*>w=)VpZ2{D((WVcQ0VDM*4!v*Qeli
E`L0tI{Qv*}

diff --git a/git-2.19.0.tar.xz b/git-2.19.0.tar.xz
deleted file mode 100644
index 690e225..0000000
--- a/git-2.19.0.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:180feff58fc0d965d23ea010aa2c69ead92ec318eb9b09cf737529aec62f3ef4
-size 5227124
diff --git a/git-2.19.1.tar.sign b/git-2.19.1.tar.sign
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..b594703e6581553ffd014c5d57b7cd8a422fc6f120d45fedb7f768f030a89bfe
GIT binary patch
literal 566
zcmV-60?GY}0y6{v0SEvc79j-T@HVmj=OQ1+c<k@6wdjVHujb1I0$aBi{QwFH5U{oA
zhL*49%j;kd|8KUe*E%x9+T6Bt`Kt_{C{JOd!QUpzQVDxqFD0D5r5!vUjEoYm*==Z(
zU-tn!3yuS|tWUzAIuj+cq)TQ@YQOCX)AZd{FQyVuM_w3xzJd1|1mCiRCe3JpzCm+a
z(2SkPAhfZSJ3Bl7K^MpR(I8UT3qtCtr~U^uwpU0Xc>+4OYbn>9wh3F&9T8Bly?4s(
zMRQtyPka^4W5I~@xDELd_1YYXC{Y9kc;L8B)%>2v5S&A2q^9_-1|r=KzP3RHc?_Fv
znhuiaz&owlQPaGcl$PG=Xe$t9k&TWvtNMKBR#5mlTOfps<9R5476F(s+}!ur<NDjr
zvGq~gnIaJ}x0YRq?8FY{aCRuc0u~yMN+LM|ZFT|8peFlBmG_hox8LkQK$QF+{fX9y
z|M8h@zDA4cKIFfjJS0f@6kWf76DAq2Kw0_?&<?6<y&?!m`do{xb}aJyAn<CSZ?rc*
zOitCq>48{|1(A~$ddXDIScQ>W5<*nU=#@5VpV{>0EU|@2e4R4N#th7b3mT3dg4vJf
ze%B(BWDTl3Ub{$>j+4;I00L=^T|uf|t*7x$g&v02`%}_jyci{rL7?TJ9f<y4D7lr}
z!B^<HC2S~(7Egvf8RxNeZ#zg{KHc$z8CQh#vMr3~xIF&vYjKWB{UNB&FI@Q+umdrX
EP-(CiGXMYp

literal 0
HcmV?d00001

diff --git a/git-2.19.1.tar.xz b/git-2.19.1.tar.xz
new file mode 100644
index 0000000..e5cf231
--- /dev/null
+++ b/git-2.19.1.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:345056aa9b8084280b1b9fe1374d232dec05a34e8849028a20bfdb56e920dbb5
+size 5227908
diff --git a/git.changes b/git.changes
index 5a57c32..c82a432 100644
--- a/git.changes
+++ b/git.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Fri Oct  5 17:31:07 UTC 2018 - astieger@suse.com
+
+- git 2.19.1:
+  * CVE-2018-17456: Specially crafted .gitmodules files may have
+    allowed arbitrary code execution when the repository is cloned
+    with --recurse-submodules (bsc#1110949)
+
 -------------------------------------------------------------------
 Tue Sep 11 14:40:01 UTC 2018 - Petr Vorel <pvorel@suse.cz>
 
diff --git a/git.spec b/git.spec
index c17ac33..fabd839 100644
--- a/git.spec
+++ b/git.spec
@@ -35,7 +35,7 @@
 %bcond_without docs
 
 Name:           git
-Version:        2.19.0
+Version:        2.19.1
 Release:        0
 Summary:        Fast, scalable, distributed revision control system
 License:        GPL-2.0-only