public inbox for development@lists.ipfire.org
 help / color / mirror / Atom feed
* [PATCH] git: update to 2.7.4 v3
@ 2016-04-04  5:33 Marcel Lorenz
  0 siblings, 0 replies; only message in thread
From: Marcel Lorenz @ 2016-04-04  5:33 UTC (permalink / raw)
  To: development

[-- Attachment #1: Type: text/plain, Size: 2013 bytes --]

Remote Code Execution in all git versions: CVE-2016-2324 and CVE-2016-2315
Git version 2.7.4 was released with the fixes for all known vulnerabilities

https://github.com/git/git/tree/master/Documentation/RelNotes

Signed-off-by: Marcel Lorenz <marcel.lorenz(a)ipfire.org>

---
 config/rootfiles/packages/git | 11 +----------
 lfs/git                       |  4 ++--
 2 files changed, 3 insertions(+), 12 deletions(-)

diff --git a/config/rootfiles/packages/git b/config/rootfiles/packages/git
index ea31b20..e5735f3 100644
--- a/config/rootfiles/packages/git
+++ b/config/rootfiles/packages/git
@@ -22,8 +22,6 @@ usr/lib/perl5/site_perl/5.12.3/Git/SVN/Migration.pm
 usr/lib/perl5/site_perl/5.12.3/Git/SVN/Prompt.pm
 usr/lib/perl5/site_perl/5.12.3/Git/SVN/Ra.pm
 usr/lib/perl5/site_perl/5.12.3/Git/SVN/Utils.pm
-#usr/lib/perl5/site_perl/5.12.3/MACHINE-linux-thread-multi/auto/Git
-#usr/lib/perl5/site_perl/5.12.3/MACHINE-linux-thread-multi/auto/Git/.packlist
 #usr/libexec/git-core
 #usr/libexec/git-core/git
 usr/libexec/git-core/git-add
@@ -324,12 +322,5 @@ usr/share/git-core/templates/info/exclude
 #usr/share/locale/sv/LC_MESSAGES/git.mo
 #usr/share/locale/vi/LC_MESSAGES/git.mo
 #usr/share/locale/zh_CN/LC_MESSAGES/git.mo
-#usr/share/man/man3/Git.3
-#usr/share/man/man3/Git::I18N.3
-#usr/share/man/man3/Git::SVN::Editor.3
-#usr/share/man/man3/Git::SVN::Fetcher.3
-#usr/share/man/man3/Git::SVN::Memoize::YAML.3
-#usr/share/man/man3/Git::SVN::Prompt.3
-#usr/share/man/man3/Git::SVN::Ra.3
-#usr/share/man/man3/Git::SVN::Utils.3
 #usr/share/man/man3/private-Error.3
+
diff --git a/lfs/git b/lfs/git
index a3f6636..5b1667c 100644
--- a/lfs/git
+++ b/lfs/git
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 2.7.1
+VER        = 2.7.4
 
 THISAPP    = git-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -44,7 +44,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = eece7b1e87983271621a0cb6aab37a25
+$(DL_FILE)_MD5 = b0219fcb6d73104361f4fbdba3741d00
 
 install : $(TARGET)
 
-- 
1.9.1


^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2016-04-04  5:33 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-04-04  5:33 [PATCH] git: update to 2.7.4 v3 Marcel Lorenz

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox