diff --git a/git-2.39.0.tar.sign b/git-2.39.0.tar.sign deleted file mode 100644 index 9a2c1a2..0000000 Binary files a/git-2.39.0.tar.sign and /dev/null differ diff --git a/git-2.39.0.tar.xz b/git-2.39.0.tar.xz deleted file mode 100644 index 0a866e4..0000000 --- a/git-2.39.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ba199b13fb5a99ca3dec917b0bd736bc0eb5a9df87737d435eddfdf10d69265b -size 7157548 diff --git a/git-2.39.1.tar.sign b/git-2.39.1.tar.sign new file mode 100644 index 0000000..d69a968 Binary files /dev/null and b/git-2.39.1.tar.sign differ diff --git a/git-2.39.1.tar.xz b/git-2.39.1.tar.xz new file mode 100644 index 0000000..5a33d71 --- /dev/null +++ b/git-2.39.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:40a38a0847b30c371b35873b3afcf123885dd41ea3ecbbf510efa97f3ce5c161 +size 7160744 diff --git a/git.changes b/git.changes index fcdf958..288ea91 100644 --- a/git.changes +++ b/git.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Tue Jan 17 19:13:03 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de> + +- git 2.39.1, fixing two security issues that could allow remote + code execution when accessing specially crafted repositories: + * CVE-2022-41903: log format integer overflow boo#1207033 + * CVE-2022-23521: gitattributed parsing integer overflow + boo#1207032 + ------------------------------------------------------------------- Thu Dec 15 12:01:04 UTC 2022 - Dirk Müller <dmueller@suse.com> diff --git a/git.spec b/git.spec index ddeb9d8..5aa25b2 100644 --- a/git.spec +++ b/git.spec @@ -1,7 +1,7 @@ # # spec file for package git # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -36,7 +36,7 @@ %bcond_with asciidoctor %endif Name: git -Version: 2.39.0 +Version: 2.39.1 Release: 0 Summary: Fast, scalable, distributed revision control system License: GPL-2.0-only