Remote Code Execution in all git versions: CVE-2016-2324 and CVE-2016-2315 Git version 2.7.4 was released with the fixes for all known vulnerabilities
https://github.com/git/git/tree/master/Documentation/RelNotes
Signed-off-by: Marcel Lorenz marcel.lorenz@ipfire.org
--- config/rootfiles/packages/git | 11 +---------- lfs/git | 4 ++-- 2 files changed, 3 insertions(+), 12 deletions(-)
diff --git a/config/rootfiles/packages/git b/config/rootfiles/packages/git index ea31b20..e5735f3 100644 --- a/config/rootfiles/packages/git +++ b/config/rootfiles/packages/git @@ -22,8 +22,6 @@ usr/lib/perl5/site_perl/5.12.3/Git/SVN/Migration.pm usr/lib/perl5/site_perl/5.12.3/Git/SVN/Prompt.pm usr/lib/perl5/site_perl/5.12.3/Git/SVN/Ra.pm usr/lib/perl5/site_perl/5.12.3/Git/SVN/Utils.pm -#usr/lib/perl5/site_perl/5.12.3/MACHINE-linux-thread-multi/auto/Git -#usr/lib/perl5/site_perl/5.12.3/MACHINE-linux-thread-multi/auto/Git/.packlist #usr/libexec/git-core #usr/libexec/git-core/git usr/libexec/git-core/git-add @@ -324,12 +322,5 @@ usr/share/git-core/templates/info/exclude #usr/share/locale/sv/LC_MESSAGES/git.mo #usr/share/locale/vi/LC_MESSAGES/git.mo #usr/share/locale/zh_CN/LC_MESSAGES/git.mo -#usr/share/man/man3/Git.3 -#usr/share/man/man3/Git::I18N.3 -#usr/share/man/man3/Git::SVN::Editor.3 -#usr/share/man/man3/Git::SVN::Fetcher.3 -#usr/share/man/man3/Git::SVN::Memoize::YAML.3 -#usr/share/man/man3/Git::SVN::Prompt.3 -#usr/share/man/man3/Git::SVN::Ra.3 -#usr/share/man/man3/Git::SVN::Utils.3 #usr/share/man/man3/private-Error.3 + diff --git a/lfs/git b/lfs/git index a3f6636..5b1667c 100644 --- a/lfs/git +++ b/lfs/git @@ -24,7 +24,7 @@
include Config
-VER = 2.7.1 +VER = 2.7.4
THISAPP = git-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -44,7 +44,7 @@ objects = $(DL_FILE)
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
-$(DL_FILE)_MD5 = eece7b1e87983271621a0cb6aab37a25 +$(DL_FILE)_MD5 = b0219fcb6d73104361f4fbdba3741d00
install : $(TARGET)