Compare commits
25 Commits
Author | SHA256 | Date | |
---|---|---|---|
fda7c73f1c | |||
972e527526 | |||
29c41e30f3 | |||
d282f59a19 | |||
449f6b4529 | |||
25bd9d7139 | |||
c9ef1e03d7 | |||
cc31c19dde | |||
b54fb42c5f | |||
b812e06057 | |||
c7cd65c0b5 | |||
0b3439a103 | |||
81007fc644 | |||
9e8e6a8473 | |||
919cbfe376 | |||
3242813d6e | |||
616a142099 | |||
b6b6dcc2aa | |||
135bc78bbd | |||
|
4f638d656e | ||
4e674a788f | |||
64cea07b17 | |||
483dbc7bc8 | |||
e0ea61d6e0 | |||
b80926ddde |
@@ -1,8 +1,8 @@
|
||||
Index: b/read-cache.c
|
||||
Index: git/read-cache.c
|
||||
===================================================================
|
||||
--- a/read-cache.c
|
||||
+++ b/read-cache.c
|
||||
@@ -1158,10 +1158,13 @@ static int has_dir_name(struct index_sta
|
||||
--- git.orig/read-cache.c
|
||||
+++ git/read-cache.c
|
||||
@@ -1135,10 +1135,13 @@ static int has_dir_name(struct index_sta
|
||||
size_t len;
|
||||
|
||||
for (;;) {
|
||||
|
@@ -2,11 +2,11 @@
|
||||
contrib/completion/git-completion.bash | 10 ++++++----
|
||||
1 file changed, 6 insertions(+), 4 deletions(-)
|
||||
|
||||
Index: git-2.43.1/contrib/completion/git-completion.bash
|
||||
Index: git/contrib/completion/git-completion.bash
|
||||
===================================================================
|
||||
--- git-2.43.1.orig/contrib/completion/git-completion.bash
|
||||
+++ git-2.43.1/contrib/completion/git-completion.bash
|
||||
@@ -67,10 +67,12 @@
|
||||
--- git.orig/contrib/completion/git-completion.bash
|
||||
+++ git/contrib/completion/git-completion.bash
|
||||
@@ -81,10 +81,12 @@
|
||||
# case insensitively, even on systems with case sensitive file systems
|
||||
# (e.g., completing tag name "FOO" on "git checkout f<TAB>").
|
||||
|
||||
|
Binary file not shown.
BIN
git-2.46.0.tar.xz
(Stored with Git LFS)
BIN
git-2.46.0.tar.xz
(Stored with Git LFS)
Binary file not shown.
BIN
git-2.51.0.tar.sign
Normal file
BIN
git-2.51.0.tar.sign
Normal file
Binary file not shown.
BIN
git-2.51.0.tar.xz
(Stored with Git LFS)
Normal file
BIN
git-2.51.0.tar.xz
(Stored with Git LFS)
Normal file
Binary file not shown.
@@ -1,17 +1,17 @@
|
||||
---
|
||||
Documentation/asciidoc.conf | 2 ++
|
||||
Documentation/asciidoc.conf.in | 2 ++
|
||||
1 file changed, 2 insertions(+)
|
||||
|
||||
Index: git-2.11.0/Documentation/asciidoc.conf
|
||||
Index: git-2.48.0/Documentation/asciidoc.conf.in
|
||||
===================================================================
|
||||
--- git-2.11.0.orig/Documentation/asciidoc.conf
|
||||
+++ git-2.11.0/Documentation/asciidoc.conf
|
||||
@@ -21,6 +21,8 @@ tilde=~
|
||||
apostrophe='
|
||||
backtick=`
|
||||
litdd=--
|
||||
--- git-2.48.0.orig/Documentation/asciidoc.conf.in
|
||||
+++ git-2.48.0/Documentation/asciidoc.conf.in
|
||||
@@ -24,6 +24,8 @@ litdd=--
|
||||
manmanual=Git Manual
|
||||
mansource=Git @GIT_VERSION@
|
||||
revdate=@GIT_DATE@
|
||||
+# drops the "last-updated" footer, with asciidoc-8.6.9+
|
||||
+footer-style=none
|
||||
|
||||
ifdef::backend-docbook[]
|
||||
[linkgit-inlinemacro]
|
||||
ifdef::doctype-book[]
|
||||
[titles]
|
||||
|
@@ -4,10 +4,10 @@
|
||||
contrib/completion/git.tcsh | 4 ++++
|
||||
3 files changed, 15 insertions(+), 10 deletions(-)
|
||||
|
||||
Index: git-2.11.0/contrib/completion/git-completion.tcsh
|
||||
Index: git/contrib/completion/git-completion.tcsh
|
||||
===================================================================
|
||||
--- git-2.11.0.orig/contrib/completion/git-completion.tcsh
|
||||
+++ git-2.11.0/contrib/completion/git-completion.tcsh
|
||||
--- git.orig/contrib/completion/git-completion.tcsh
|
||||
+++ git/contrib/completion/git-completion.tcsh
|
||||
@@ -32,14 +32,14 @@ if ( ${__git_tcsh_completion_version[1]}
|
||||
endif
|
||||
unset __git_tcsh_completion_version
|
||||
@@ -30,26 +30,26 @@ Index: git-2.11.0/contrib/completion/git-completion.tcsh
|
||||
|
||||
cat << EOF >! ${__git_tcsh_completion_script}
|
||||
#!bash
|
||||
@@ -121,6 +121,3 @@ EOF
|
||||
@@ -122,6 +122,3 @@ EOF
|
||||
|
||||
# Don't need this variable anymore, so don't pollute the users environment
|
||||
unset __git_tcsh_completion_original_script
|
||||
-
|
||||
-complete git 'p,*,`bash ${__git_tcsh_completion_script} git "${COMMAND_LINE}"`,'
|
||||
-complete gitk 'p,*,`bash ${__git_tcsh_completion_script} gitk "${COMMAND_LINE}"`,'
|
||||
Index: git-2.11.0/contrib/completion/git.csh
|
||||
Index: git/contrib/completion/git.csh
|
||||
===================================================================
|
||||
--- /dev/null
|
||||
+++ git-2.11.0/contrib/completion/git.csh
|
||||
+++ git/contrib/completion/git.csh
|
||||
@@ -0,0 +1,4 @@
|
||||
+if (${?prompt}) then
|
||||
+complete git 'p,*,`bash /usr/share/tcsh/git.complete git "${COMMAND_LINE}"`,'
|
||||
+complete gitk 'p,*,`bash /usr/share/tcsh/git.complete gitk "${COMMAND_LINE}"`,'
|
||||
+endif
|
||||
Index: git-2.11.0/contrib/completion/git.tcsh
|
||||
Index: git/contrib/completion/git.tcsh
|
||||
===================================================================
|
||||
--- /dev/null
|
||||
+++ git-2.11.0/contrib/completion/git.tcsh
|
||||
+++ git/contrib/completion/git.tcsh
|
||||
@@ -0,0 +1,4 @@
|
||||
+if (${?prompt}) then
|
||||
+complete git 'p,*,`bash /usr/share/tcsh/git.complete git "${COMMAND_LINE}"`,'
|
||||
|
526
git.changes
526
git.changes
@@ -1,3 +1,529 @@
|
||||
-------------------------------------------------------------------
|
||||
Wed Aug 20 14:22:54 UTC 2025 - Antonio Teixeira <antonio.teixeira@suse.com>
|
||||
|
||||
- Use zlib instead of zlib-ng for SLES16
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Aug 18 18:38:01 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
|
||||
|
||||
- Update to 2.51.0
|
||||
- UI, Workflows & Features
|
||||
- Userdiff patterns for the R language have been added.
|
||||
- Documentation for "git send-email" has been updated with a
|
||||
bit more credential helper and OAuth information.
|
||||
- "git cat-file --batch" learns to understand %(objectmode)
|
||||
atom to allow the caller to tell missing objects (due to
|
||||
repository corruption) and submodules (whose commit objects
|
||||
are OK to be missing) apart.
|
||||
- "git diff --no-index dirA dirB" can limit the comparison with
|
||||
pathspec at the end of the command line, just like normal
|
||||
"git diff".
|
||||
- "git subtree" (in contrib/) learned to grok GPG signing its
|
||||
commits.
|
||||
- "git whatchanged" that is longer to type than "git log --raw"
|
||||
which is its modern rough equivalent has outlived its
|
||||
usefulness more than 10 years ago. Plan to deprecate and
|
||||
remove it.
|
||||
- An interchange format for stash entries is defined, and
|
||||
subcommand of "git stash" to import/export has been added.
|
||||
- "git merge/pull" has been taught the "--compact-summary"
|
||||
option to use the compact-summary format, intead of diffstat,
|
||||
when showing the summary of the incoming changes.
|
||||
- "git imap-send" has been broken for a long time, which has
|
||||
been resurrected and then taught to talk OAuth2.0 etc.
|
||||
- Some error messages from "git imap-send" has been updated.
|
||||
- When "git daemon" sees a signal while attempting to accept()
|
||||
a new client, instead of retrying, it skipped it by mistake,
|
||||
which has been corrected.
|
||||
- The reftable ref backend has matured enough; Git 3.0 will
|
||||
make it the default format in a newly created repositories by
|
||||
default.
|
||||
- "netrc" credential helper has been improved to understand
|
||||
textual service names (like smtp) in addition to the numeric
|
||||
port numbers (like 25).
|
||||
- Lift the limitation to use changed-path filter in "git log"
|
||||
so that it can be used for a pathspec with multiple literal
|
||||
paths.
|
||||
- Clean up the way how signature on commit objects are exported
|
||||
to and imported from fast-import stream.
|
||||
- Remove unsupported, unused, and unsupportable old option from
|
||||
"git log".
|
||||
- Document recently added "git imap-send --list" with an
|
||||
example.
|
||||
- "git pull" learned to pay attention to pull.autostash
|
||||
configuration variable, which overrides
|
||||
rebase/merge.autostash.
|
||||
- "git for-each-ref" learns "--start-after" option to help
|
||||
applications that want to page its output.
|
||||
- "git switch" and "git restore" are declared to be no longer
|
||||
experimental.
|
||||
- "git -c alias.foo=bar foo -h baz" reported "'foo' is aliased
|
||||
to 'bar'" and then went on to run "git foo -h baz", which was
|
||||
unexpected. Tighten the rule so that alias expansion is
|
||||
reported only when "-h" is the sole option.
|
||||
- Performance, Internal Implementation, Development Support etc.
|
||||
- "git pack-objects" learned to find delta bases from blobs at
|
||||
the same path, using the --path-walk API.
|
||||
- CodingGuidelines update.
|
||||
- Add settings for Solaris 10 & 11.
|
||||
- Meson-based build/test framework now understands TAP output
|
||||
generated by our tests.
|
||||
- "Do not explicitly initialize to zero" rule has been
|
||||
clarified in the CodingGuidelines document.
|
||||
- A test helper "test_seq" function learned the "-f <fmt>"
|
||||
option, which allowed us to simplify a lot of test scripts.
|
||||
- A lot of stale stuff has been removed from the contrib/
|
||||
hierarchy.
|
||||
- "git push" and "git fetch" are taught to update refs in
|
||||
batches to gain performance.
|
||||
- Some code paths in "git prune" used to ignore the passed-in
|
||||
repository object and used the `the_repository` singleton
|
||||
instance instead, which has been corrected.
|
||||
- Update ".clang-format" and ".editorconfig" to match our style
|
||||
guide a bit better.
|
||||
- "make coccicheck" succeeds even when spatch made suggestions,
|
||||
which has been updated to fail in such a case.
|
||||
- Code clean-up around object access API.
|
||||
- Define .precision to more canned parse-options type to avoid
|
||||
bugs coming from using a variable with a wrong type to
|
||||
capture the parsed values.
|
||||
- Flipping the default hash function to SHA-256 at Git 3.0
|
||||
boundary is planned.
|
||||
- Declare weather-balloon we raised for "bool" type 18 months
|
||||
ago a success and officially allow using the type in our
|
||||
codebase.
|
||||
- GIT_TEST_INSTALLED was not honored in the recent topic
|
||||
related to SHA256 hashes, which has been corrected.
|
||||
- The pop_most_recent_commit() function can have quite
|
||||
expensive worst case performance characteristics, which has
|
||||
been optimized by using prio-queue data structure.
|
||||
- Move structure definition from unrelated header file to where
|
||||
it belongs.
|
||||
- To help our developers, document what C99 language features
|
||||
are being considered for adoption, in addition to what past
|
||||
experiments have already decided.
|
||||
- The reftable unit tests are now ported to the "clar" unit
|
||||
testing framework.
|
||||
- Redefine where the multi-pack-index sits in the object
|
||||
subsystem, which recently was restructured to allow multiple
|
||||
backends that support a single object source that belongs to
|
||||
one repository. A MIDX does span multiple "object sources".
|
||||
- Reduce implicit assumption and dependence on the_repository
|
||||
in the object-file subsystem.
|
||||
|
||||
- Fixes since v2.50 Unless otherwise noted, all the changes in
|
||||
2.50.X maintenance track, including security updates, are
|
||||
included in this release.
|
||||
- A memory-leak in an error code path has been plugged. (merge
|
||||
7082da85cb ly/commit-graph-graph-write-leakfix later to
|
||||
maint).
|
||||
- A memory-leak in an error code path has been plugged. (merge
|
||||
aedebdb6b9 ly/fetch-pack-leakfix later to maint).
|
||||
- Some leftover references to documentation source files that
|
||||
no longer exist, due to recent ".txt" -> ".adoc" renaming,
|
||||
have been corrected. (merge 3717a5775a
|
||||
jw/doc-txt-to-adoc-refs later to maint).
|
||||
- "git stash -p <pathspec>" improvements. (merge 468817bab2
|
||||
pw/stash-p-pathspec-fixes later to maint).
|
||||
- "git send-email" incremented its internal message counter
|
||||
when a message was edited, which made logic that treats the
|
||||
first message specially misbehave, which has been corrected.
|
||||
(merge 2cc27b3501 ag/send-email-edit-threading-fix later to
|
||||
maint).
|
||||
- "git stash" recorded a wrong branch name when submodules are
|
||||
present in the current checkout, which has been corrected.
|
||||
(merge ffb36c64f2 kj/stash-onbranch-submodule-fix later to
|
||||
maint).
|
||||
- When asking to apply mailmap to both author and committer
|
||||
field while showing a commit object, the field that appears
|
||||
later was not correctly parsed and replaced, which has been
|
||||
corrected. (merge abf94a283f sa/multi-mailmap-fix later to
|
||||
maint).
|
||||
- "git maintenance" lacked the care "git gc" had to avoid
|
||||
holding onto the repository lock for too long during packing
|
||||
refs, which has been remedied. (merge 1b5074e614
|
||||
ps/maintenance-ref-lock later to maint).
|
||||
- Avoid regexp_constraint and instead use comparison_constraint
|
||||
when listing functions to exclude from application of
|
||||
coccinelle rules, as spatch can be built with different
|
||||
regexp engine X-<. (merge f2ad545813
|
||||
jc/cocci-avoid-regexp-constraint later to maint).
|
||||
- Updating submodules from the upstream did not work well when
|
||||
submodule's HEAD is detached, which has been improved. (merge
|
||||
ca62f524c1 jk/submodule-remote-lookup-cleanup later to
|
||||
maint).
|
||||
- Remove unnecessary check from "git daemon" code. (merge
|
||||
0c856224d2 cb/daemon-fd-check-fix later to maint).
|
||||
- Use of sysctl() system call to learn the total RAM size used
|
||||
on BSDs has been corrected. (merge 781c1cf571
|
||||
cb/total-ram-bsd-fix later to maint).
|
||||
- Drop FreeBSD 4 support and declare that we support only
|
||||
FreeBSD 12 or later, which has memmem() supported. (merge
|
||||
0392f976a7 bs/config-mak-freebsd later to maint).
|
||||
- A diff-filter with negative-only specification like "git log
|
||||
--diff-filter=d" did not trigger correctly, which has been
|
||||
fixed. (merge 375ac087c5 jk/all-negative-diff-filter-fix
|
||||
later to maint).
|
||||
- A failure to open the index file for writing due to
|
||||
conflicting access did not state what went wrong, which has
|
||||
been corrected. (merge 9455397a5c
|
||||
hy/read-cache-lock-error-fix later to maint).
|
||||
- Tempfile removal fix in the codepath to sign commits with SSH
|
||||
keys. (merge 4498127b04 re/ssh-sign-buffer-fix later to
|
||||
maint).
|
||||
- Code and test clean-up around string-list API. (merge
|
||||
6e5b26c3ff sj/string-list later to maint).
|
||||
- "git apply -N" should start from the current index and
|
||||
register only new files, but it instead started from an empty
|
||||
index, which has been corrected. (merge 2b49d97fcb
|
||||
rp/apply-intent-to-add-fix later to maint).
|
||||
- Leakfix with a new and a bit invasive test on pack-bitmap
|
||||
files. (merge bfd5522e98 ly/load-bitmap-leakfix later to
|
||||
maint).
|
||||
- "git fetch --prune" used to be O(n^2) expensive when there
|
||||
are many refs, which has been corrected. (merge 87d8d8c5d0
|
||||
ph/fetch-prune-optim later to maint).
|
||||
- When a ref creation at refs/heads/foo/bar fails, the files
|
||||
backend now removes refs/heads/foo/ if the directory is
|
||||
otherwise not used. (merge a3a7f20516
|
||||
ps/refs-files-remove-empty-parent later to maint).
|
||||
- "pack-objects" has been taught to avoid pointing into objects
|
||||
in cruft packs from midx.
|
||||
- "git remote" now detects remote names that overlap with each
|
||||
other (e.g., remote nickname "outer" and "outer/inner" are
|
||||
used at the same time), as it will lead to overlapping
|
||||
remote-tracking branches. (merge a5a727c448
|
||||
jk/remote-avoid-overlapping-names later to maint).
|
||||
- The gpg.program configuration variable, which names a
|
||||
pathname to the (custom) GPG compatible program, can now be
|
||||
spelled with ~tilde expansion. (merge 7d275cd5c0
|
||||
jb/gpg-program-variable-is-a-pathname later to maint).
|
||||
- Our <sane-ctype.h> header file relied on that the
|
||||
system-supplied <ctype.h> header is not later included, which
|
||||
would override our macro definitions, but "amazon linux"
|
||||
broke this assumption. Fix this by preemptively including
|
||||
<ctype.h> near the beginning of <sane-ctype.h> ourselves.
|
||||
(merge 9d3b33125f ps/sane-ctype-workaround later to maint).
|
||||
- Clean-up compat/bswap.h mess. (merge f4ac32c03a
|
||||
ss/compat-bswap-revamp later to maint).
|
||||
- Meson-based build did not handle libexecdir setting
|
||||
correctly, which has been corrected. (merge 056dbe8612
|
||||
rj/meson-libexecdir-fix later to maint).
|
||||
- Document that we do not require "real" name when signing your
|
||||
patches off. (merge 1f0fed312a
|
||||
bc/contribution-under-non-real-names later to maint).
|
||||
- "git commit" that concludes a conflicted merge failed to
|
||||
notice and remove existing comment added automatically (like
|
||||
"# Conflicts:") when the core.commentstring is set to 'auto'.
|
||||
(merge 92b7c7c9f5 ac/auto-comment-char-fix later to maint).
|
||||
- "git rebase -i" with bogus rebase.instructionFormat
|
||||
configuration failed to produce the todo file after recording
|
||||
the state files, leading to confused "git status"; this has
|
||||
been corrected. (merge ade14bffd7
|
||||
ow/rebase-verify-insn-fmt-before-initializing-state later to
|
||||
maint).
|
||||
- A few file descriptors left unclosed upon program completion
|
||||
in a few test helper programs are now closed. (merge
|
||||
0f1b33815b hl/test-helper-fd-close later to maint).
|
||||
- Interactive prompt code did not correctly strip CRLF from the
|
||||
end of line on Windows. (merge 711a20827b js/prompt-crlf-fix
|
||||
later to maint).
|
||||
- The config API had a set of convenience wrapper functions
|
||||
that implicitly use the_repository instance; they have been
|
||||
removed and inlined at the calling sites.
|
||||
- "git add/etc -p" now honor the diff.context configuration
|
||||
variable, and also they learn to honor the -U<n> command-line
|
||||
option. (merge 2b3ae04011 lm/add-p-context later to maint).
|
||||
- The case where a new submodule takes a path where there used
|
||||
to be a completely different subproject is now dealt with a
|
||||
bit better than before. (merge 5ed8c5b465
|
||||
kj/renamed-submodule later to maint).
|
||||
- The deflate codepath in "git archive --format=zip" had a
|
||||
longstanding bug coming from misuse of zlib API, which has
|
||||
been corrected.
|
||||
- drop patches included in update:
|
||||
0001-git-gui-Replace-null_sha1-with-nullid.patch
|
||||
0001-gitk-Add-support-of-SHA256-repo.patch
|
||||
0002-git-gui-Add-support-of-SHA256-repo.patch
|
||||
- refreshed patches:
|
||||
CVE-2024-24577.patch
|
||||
completion-wordbreaks.diff
|
||||
git-tcsh-completion-fixes.diff
|
||||
setup-don-t-fail-if-commondir-reference-is-deleted.patch
|
||||
- contrib/workdir is dropped. remove references for it.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jul 15 13:20:32 UTC 2025 - Takashi Iwai <tiwai@suse.com>
|
||||
|
||||
- update git-gui sha256 patches after the upstream review:
|
||||
0001-git-gui-Replace-null_sha1-with-nullid.patch
|
||||
0002-git-gui-Add-support-of-SHA256-repo.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jul 9 11:01:47 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
|
||||
|
||||
- refreshed gitk sha256 patches:
|
||||
0001-gitk-Add-support-of-SHA256-repo.patch
|
||||
0002-git-gui-Add-support-of-SHA256-repo.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jul 9 10:48:56 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
|
||||
|
||||
- update to 2.50.1 (boo#1245938 boo#1245939 boo#1245942 boo#1245943
|
||||
boo#1245946 boo#1245947)
|
||||
Security fixes for CVE-2025-27613, CVE-2025-27614,
|
||||
CVE-2025-46334, CVE-2025-46835, CVE-2025-48384, CVE-2025-48385,
|
||||
and CVE-2025-48386
|
||||
|
||||
CVE-2025-27613, Gitk:
|
||||
|
||||
When a user clones an untrusted repository and runs Gitk without
|
||||
additional command arguments, any writable file can be created and
|
||||
truncated. The option "Support per-file encoding" must have been
|
||||
enabled. The operation "Show origin of this line" is affected as
|
||||
well, regardless of the option being enabled or not.
|
||||
|
||||
CVE-2025-27614, Gitk:
|
||||
|
||||
A Git repository can be crafted in such a way that a user who has
|
||||
cloned the repository can be tricked into running any script
|
||||
supplied by the attacker by invoking `gitk filename`, where
|
||||
`filename` has a particular structure.
|
||||
|
||||
CVE-2025-46334, Git GUI (Windows only):
|
||||
|
||||
A malicious repository can ship versions of sh.exe or typical
|
||||
textconv filter programs such as astextplain. On Windows, path
|
||||
lookup can find such executables in the worktree. These programs
|
||||
are invoked when the user selects "Git Bash" or "Browse Files" from
|
||||
the menu.
|
||||
|
||||
CVE-2025-46835, Git GUI:
|
||||
|
||||
When a user clones an untrusted repository and is tricked into
|
||||
editing a file located in a maliciously named directory in the
|
||||
repository, then Git GUI can create and overwrite any writable
|
||||
file.
|
||||
|
||||
CVE-2025-48384, Git:
|
||||
|
||||
When reading a config value, Git strips any trailing carriage
|
||||
return and line feed (CRLF). When writing a config entry, values
|
||||
with a trailing CR are not quoted, causing the CR to be lost when
|
||||
the config is later read. When initializing a submodule, if the
|
||||
submodule path contains a trailing CR, the altered path is read
|
||||
resulting in the submodule being checked out to an incorrect
|
||||
location. If a symlink exists that points the altered path to the
|
||||
submodule hooks directory, and the submodule contains an executable
|
||||
post-checkout hook, the script may be unintentionally executed
|
||||
after checkout.
|
||||
|
||||
CVE-2025-48385, Git:
|
||||
|
||||
When cloning a repository Git knows to optionally fetch a bundle
|
||||
advertised by the remote server, which allows the server-side to
|
||||
offload parts of the clone to a CDN. The Git client does not
|
||||
perform sufficient validation of the advertised bundles, which
|
||||
allows the remote side to perform protocol injection.
|
||||
This protocol injection can cause the client to write the fetched
|
||||
bundle to a location controlled by the adversary. The fetched
|
||||
content is fully controlled by the server, which can in the worst
|
||||
case lead to arbitrary code execution.
|
||||
CVE-2025-48386, Git:
|
||||
|
||||
The wincred credential helper uses a static buffer (`target`) as a
|
||||
unique key for storing and comparing against internal storage. This
|
||||
credential helper does not properly bounds check the available
|
||||
space remaining in the buffer before appending to it with
|
||||
`wcsncat()`, leading to potential buffer overflows.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Jun 26 15:32:00 UTC 2025 - Takashi Iwai <tiwai@suse.com>
|
||||
|
||||
- Fix git-gui citool SHA256 repo handling:
|
||||
refreshed 0002-git-gui-Add-support-of-SHA256-repo.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jun 17 17:55:40 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
|
||||
|
||||
- update to 2.50.0
|
||||
https://about.gitlab.com/blog/what-s-new-in-git-2-50-0/
|
||||
https://raw.githubusercontent.com/git/git/refs/tags/v2.50.0/Documentation/RelNotes/2.50.0.adoc
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Jun 13 15:50:22 UTC 2025 - Takashi Iwai <tiwai@suse.com>
|
||||
|
||||
- Refresh gitk SHA256 patch and add SHA256 support to git-gui (bsc#1239989):
|
||||
0001-gitk-Add-support-of-SHA256-repo.patch
|
||||
0002-git-gui-Add-support-of-SHA256-repo.patch
|
||||
The previous patches are dropped:
|
||||
0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
|
||||
0002-gitk-Add-auto-select-length-preference-for-SHA256.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Mar 24 14:04:56 UTC 2025 - Takashi Iwai <tiwai@suse.com>
|
||||
|
||||
- Add support of SHA256 git repo for gitk (bsc#1239989):
|
||||
0001-gitk-Add-a-basic-support-of-SHA256-repositories-into.patch
|
||||
0002-gitk-Add-auto-select-length-preference-for-SHA256.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Mar 14 23:43:43 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
|
||||
|
||||
- update to 2.49.0
|
||||
https://about.gitlab.com/blog/2025/03/14/whats-new-in-git-2-49-0/
|
||||
https://raw.githubusercontent.com/git/git/refs/tags/v2.49.0/Documentation/RelNotes/2.49.0.adoc
|
||||
- switch to zlib-ng for code 16
|
||||
- docs switched to asciidoc
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jan 14 21:45:04 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
|
||||
|
||||
- update to 2.48.1: (boo#1235600 boo#1235601)
|
||||
* CVE-2024-50349, CVE-2024-52006:
|
||||
refuse to accept URLs that contain control sequences
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jan 13 20:00:00 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
|
||||
|
||||
- update to 2.48.0
|
||||
* Reference consistency checks: git refs verify
|
||||
* Reflogs can now be migrated with git refs migrate
|
||||
* git is free of memory leaks as covered by the test suite
|
||||
* Performance improvements
|
||||
* Other improvements, UI changes, options extensions and largely
|
||||
compatible behavior changes as listed in
|
||||
https://raw.githubusercontent.com/git/git/refs/tags/v2.48.0/Documentation/RelNotes/2.48.0.txt
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Nov 25 10:58:31 UTC 2024 - Andreas Stieger <andreas.stieger@gmx.de>
|
||||
|
||||
- update to 2.47.1:
|
||||
* Use after free and double freeing at the end in
|
||||
"git log -L... -p" had been identified and fixed.
|
||||
* "git maintenance start" crashed due to an uninitialized
|
||||
variable reference, which has been corrected.
|
||||
* Fail gracefully instead of crashing when attempting to write
|
||||
the contents of a corrupt in-core index as a tree object.
|
||||
* A "git fetch" from the superproject going down to a submodule
|
||||
used a wrong remote when the default remote names are set
|
||||
differently between them.
|
||||
* The "gitk" project tree has been synchronized again
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Oct 9 10:34:12 UTC 2024 - Dirk Müller <dmueller@suse.com>
|
||||
|
||||
- update to 2.47.0:
|
||||
* https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.47.0.txt
|
||||
* Many Porcelain commands that internally use the merge machinery
|
||||
were taught to consistently honor the diff.algorithm
|
||||
configuration.
|
||||
* A few descriptions in "git show-ref -h" have been clarified.
|
||||
* A 'P' command to "git add -p" that passes the patch hunk to the
|
||||
pager has been added.
|
||||
* "git grep -W" omits blank lines that follow the found function at
|
||||
the end of the file, just like it omits blank lines before the next
|
||||
function.
|
||||
* The value of http.proxy can have "path" at the end for a socks
|
||||
proxy that listens to a unix-domain socket, but we started to
|
||||
discard it when we taught proxy auth code path to use the
|
||||
credential helpers, which has been corrected.
|
||||
* The code paths to compact multiple reftable files have been updated
|
||||
to correctly deal with multiple compaction triggering at the same
|
||||
time.
|
||||
* Support to specify ref backend for submodules has been enhanced.
|
||||
* "git svn" has been taught about svn:global-ignores property
|
||||
recent versions of Subversion has.
|
||||
* The default object hash and ref backend format used to be settable
|
||||
only with explicit command line option to "git init" and
|
||||
environment variables, but now they can be configured in the user's
|
||||
global and system wide configuration.
|
||||
* "git send-email" learned "--translate-aliases" option that reads
|
||||
addresses from the standard input and emits the result of applying
|
||||
aliases on them to the standard output.
|
||||
* 'git for-each-ref' learned a new "--format" atom to find the branch
|
||||
that the history leading to a given commit "%(is-base:<commit>)" is
|
||||
likely based on.
|
||||
* The command line prompt support used to be littered with bash-isms,
|
||||
which has been corrected to work with more shells.
|
||||
* Support for the RUNTIME_PREFIX feature has been added to z/OS port.
|
||||
* "git send-email" learned "--mailmap" option to allow rewriting the
|
||||
recipient addresses.
|
||||
* "git mergetool" learned to use VSCode as a merge backend.
|
||||
* "git pack-redundant" has been marked for removal in Git 3.0.
|
||||
* One-line messages to "die" and other helper functions will get LF
|
||||
added by these helper functions, but many existing messages had an
|
||||
unnecessary LF at the end, which have been corrected.
|
||||
* The "scalar clone" command learned the "--no-tags" option.
|
||||
* The environment GIT_ADVICE has been intentionally kept undocumented
|
||||
to discourage its use by interactive users. Add documentation to
|
||||
help tool writers.
|
||||
* "git apply --3way" learned to take "--ours" and other options.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Oct 7 12:01:19 UTC 2024 - Antonio Teixeira <antonio.teixeira@suse.com>
|
||||
|
||||
- Update to version 2.46.2:
|
||||
* Revert the "git patch-id" change that went into 2.46.1,
|
||||
as it seems to have got a regression reported (I haven't verified,
|
||||
but it is better to keep a known breakage than adding an unintended
|
||||
regression).
|
||||
* In a few corner cases "git diff --exit-code" failed to report
|
||||
"changes" (e.g., renamed without any content change), which has
|
||||
been corrected.
|
||||
* The interpret-trailers command failed to recognise the end of the
|
||||
message when the commit log ends in an incomplete line.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 20 08:18:30 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
|
||||
|
||||
- Update to version 2.46.1;
|
||||
* "git checkout --ours" (no other arguments) complained that the
|
||||
option is incompatible with branch switching, which is technically
|
||||
correct, but found confusing by some users. It now says that the
|
||||
user needs to give pathspec to specify what paths to checkout.
|
||||
* It has been documented that we avoid "VAR=VAL shell_func" and why.
|
||||
* "git add -p" by users with diff.suppressBlankEmpty set to true
|
||||
failed to parse the patch that represents an unmodified empty line
|
||||
with an empty line (not a line with a single space on it), which
|
||||
has been corrected.
|
||||
* "git rebase --help" referred to "offset" (the difference between
|
||||
the location a change was taken from and the change gets replaced)
|
||||
incorrectly and called it "fuzz", which has been corrected.
|
||||
* "git notes add -m '' --allow-empty" and friends that take prepared
|
||||
data to create notes should not invoke an editor, but it started
|
||||
doing so since Git 2.42, which has been corrected.
|
||||
* An expensive operation to prepare tracing was done in re-encoding
|
||||
code path even when the tracing was not requested, which has been
|
||||
corrected.
|
||||
* Perforce tests have been updated.
|
||||
* The credential helper to talk to OSX keychain sometimes sent
|
||||
garbage bytes after the username, which has been corrected.
|
||||
* A recent update broke "git ls-remote" used outside a repository,
|
||||
which has been corrected.
|
||||
* "git config --value=foo --fixed-value section.key newvalue" barfed
|
||||
when the existing value in the configuration file used the
|
||||
valueless true syntax, which has been corrected.
|
||||
* "git reflog expire" failed to honor annotated tags when computing
|
||||
reachable commits.
|
||||
* A flakey test and incorrect calls to strtoX() functions have been
|
||||
fixed.
|
||||
* Follow-up on 2.45.1 regression fix.
|
||||
* "git rev-list ... | git diff-tree -p --remerge-diff --stdin" should
|
||||
behave more or less like "git log -p --remerge-diff" but instead it
|
||||
crashed, forgetting to prepare a temporary object store needed.
|
||||
* The patch parser in "git patch-id" has been tightened to avoid
|
||||
getting confused by lines that look like a patch header in the log
|
||||
message.
|
||||
* "git bundle unbundle" outside a repository triggered a BUG()
|
||||
unnecessarily, which has been corrected.
|
||||
* The code forgot to discard unnecessary in-core commit buffer data
|
||||
for commits that "git log --skip=<number>" traversed but omitted
|
||||
from the output, which has been corrected.
|
||||
* "git verify-pack" and "git index-pack" started dying outside a
|
||||
repository, which has been corrected.
|
||||
* A corner case bug in "git stash" was fixed.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Aug 28 08:33:45 UTC 2024 - Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>
|
||||
|
||||
|
19
git.spec
19
git.spec
@@ -1,8 +1,8 @@
|
||||
#
|
||||
# spec file for package git
|
||||
#
|
||||
# Copyright (c) 2024 SUSE LLC
|
||||
# Copyright (c) 2024 Andreas Stieger <Andreas.Stieger@gmx.de>
|
||||
# Copyright (c) 2025 SUSE LLC and contributors
|
||||
# Copyright (c) 2025 Andreas Stieger <Andreas.Stieger@gmx.de>
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
@@ -43,7 +43,7 @@
|
||||
%bcond_with asciidoctor
|
||||
%endif
|
||||
Name: git
|
||||
Version: 2.46.0
|
||||
Version: 2.51.0
|
||||
Release: 0
|
||||
Summary: Fast, scalable, distributed revision control system
|
||||
License: GPL-2.0-only
|
||||
@@ -86,7 +86,11 @@ BuildRequires: systemd-rpm-macros
|
||||
BuildRequires: tcsh
|
||||
BuildRequires: update-desktop-files
|
||||
BuildRequires: xz
|
||||
%if 0%{?suse_version} > 1600
|
||||
BuildRequires: pkgconfig(zlib-ng)
|
||||
%else
|
||||
BuildRequires: pkgconfig(zlib)
|
||||
%endif
|
||||
Requires: git-core = %{version}
|
||||
Requires: perl-Git = %{version}
|
||||
Recommends: git-email
|
||||
@@ -407,8 +411,6 @@ install -m 644 %{SOURCE12} %{buildroot}/%{_sysconfdir}/bash_completion.d/git-pro
|
||||
%if %{with git_libsecret}
|
||||
install -m 755 -D contrib/credential/libsecret/git-credential-libsecret %{buildroot}/%{gitexecdir}/git-credential-libsecret
|
||||
%endif
|
||||
# contrib/workdir
|
||||
install -m 755 -D contrib/workdir/git-new-workdir %{buildroot}/%{_bindir}
|
||||
# process tcsh completion
|
||||
(cd contrib/completion
|
||||
mkdir -p %{buildroot}%{_datadir}/tcsh
|
||||
@@ -434,9 +436,9 @@ if ! test -f %{buildroot}%{gitexecdir}/git-add; then
|
||||
fi
|
||||
|
||||
mkdir -p "%{buildroot}/%{_docdir}/git" "%{buildroot}/%{_docdir}/git/howto" "%{buildroot}/%{_docdir}/git/technical"
|
||||
cp -a README.md Documentation/*.txt "%{buildroot}/%{_docdir}/git/"
|
||||
cp -a Documentation/howto/*.txt "%{buildroot}/%{_docdir}/git/howto/"
|
||||
cp -a Documentation/technical/*.txt "%{buildroot}/%{_docdir}/git/technical/"
|
||||
cp -a README.md Documentation/*.adoc "%{buildroot}/%{_docdir}/git/"
|
||||
cp -a Documentation/howto/*.adoc "%{buildroot}/%{_docdir}/git/howto/"
|
||||
cp -a Documentation/technical/*.adoc "%{buildroot}/%{_docdir}/git/technical/"
|
||||
%{!?_without_docs: cp -a Documentation/*.html "%{buildroot}/%{_docdir}/git/"}
|
||||
%{!?_without_docs: cp -a Documentation/howto/*.html "%{buildroot}/%{_docdir}/git/howto/"}
|
||||
%{!?_without_docs: cp -a Documentation/technical/*.html "%{buildroot}/%{_docdir}/git/technical/"}
|
||||
@@ -570,7 +572,6 @@ fi
|
||||
%dir %{gitexecdir}
|
||||
%dir %{gitexecdir}/mergetools
|
||||
%{gitexecdir}/mergetools/guiffy
|
||||
%{_bindir}/git-new-workdir
|
||||
%{_datadir}/bash-completion/completions/*
|
||||
%{_sysconfdir}/bash_completion.d/git-prompt
|
||||
%{_datadir}/tcsh
|
||||
|
@@ -28,11 +28,11 @@ v3:
|
||||
setup.c | 16 +++++++++++-----
|
||||
1 file changed, 11 insertions(+), 5 deletions(-)
|
||||
|
||||
Index: git-2.43.1/setup.c
|
||||
Index: git/setup.c
|
||||
===================================================================
|
||||
--- git-2.43.1.orig/setup.c
|
||||
+++ git-2.43.1/setup.c
|
||||
@@ -316,12 +316,20 @@ int get_common_dir_noenv(struct strbuf *
|
||||
--- git.orig/setup.c
|
||||
+++ git/setup.c
|
||||
@@ -327,12 +327,20 @@ int get_common_dir_noenv(struct strbuf *
|
||||
{
|
||||
struct strbuf data = STRBUF_INIT;
|
||||
struct strbuf path = STRBUF_INIT;
|
||||
@@ -56,7 +56,7 @@ Index: git-2.43.1/setup.c
|
||||
while (data.len && (data.buf[data.len - 1] == '\n' ||
|
||||
data.buf[data.len - 1] == '\r'))
|
||||
data.len--;
|
||||
@@ -332,8 +340,6 @@ int get_common_dir_noenv(struct strbuf *
|
||||
@@ -343,8 +351,6 @@ int get_common_dir_noenv(struct strbuf *
|
||||
strbuf_addbuf(&path, &data);
|
||||
strbuf_add_real_path(sb, path.buf);
|
||||
ret = 1;
|
||||
|
Reference in New Issue
Block a user