SHA256
1
0
forked from pool/git

Accepting request 1059326 from devel:tools:scm

- git 2.39.1, fixing two security issues that could allow remote
  code execution when accessing specially crafted repositories:
  * CVE-2022-41903: log format integer overflow boo#1207033
  * CVE-2022-23521: gitattributed parsing integer overflow
    boo#1207032

OBS-URL: https://build.opensuse.org/request/show/1059326
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/git?expand=0&rev=293
This commit is contained in:
Dominique Leuenberger 2023-01-20 16:37:14 +00:00 committed by Git OBS Bridge
commit a62ba7db7f
6 changed files with 14 additions and 5 deletions

Binary file not shown.

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:ba199b13fb5a99ca3dec917b0bd736bc0eb5a9df87737d435eddfdf10d69265b
size 7157548

BIN
git-2.39.1.tar.sign Normal file

Binary file not shown.

3
git-2.39.1.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:40a38a0847b30c371b35873b3afcf123885dd41ea3ecbbf510efa97f3ce5c161
size 7160744

View File

@ -1,3 +1,12 @@
-------------------------------------------------------------------
Tue Jan 17 19:13:03 UTC 2023 - Andreas Stieger <andreas.stieger@gmx.de>
- git 2.39.1, fixing two security issues that could allow remote
code execution when accessing specially crafted repositories:
* CVE-2022-41903: log format integer overflow boo#1207033
* CVE-2022-23521: gitattributed parsing integer overflow
boo#1207032
-------------------------------------------------------------------
Thu Dec 15 12:01:04 UTC 2022 - Dirk Müller <dmueller@suse.com>

View File

@ -1,7 +1,7 @@
#
# spec file for package git
#
# Copyright (c) 2022 SUSE LLC
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -36,7 +36,7 @@
%bcond_with asciidoctor
%endif
Name: git
Version: 2.39.0
Version: 2.39.1
Release: 0
Summary: Fast, scalable, distributed revision control system
License: GPL-2.0-only