diff mbox series

[bug#63092] gnu: git: Update to 2.40.1 [security fixes].

Message ID 20230426164050.2007012-1-code@greghogan.com
State New
Headers
Series [bug#63092] gnu: git: Update to 2.40.1 [security fixes]. |

Commit Message

Greg Hogan April 26, 2023, 4:40 p.m. UTC 
Fixes CVE-2023-25652 and CVE-2023-29007.

* gnu/packages/version-control.scm (git): Update to 2.40.1.
---
 gnu/packages/version-control.scm | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

Comments

Greg Hogan April 26, 2023, 5:27 p.m. UTC | #1 
v2 adds a fix for git-minimal.

Greg Hogan (2):
  gnu: git: Update to 2.40.1 [security fixes].
  gnu: git-minimal: Remove deletion of removed file.

 gnu/packages/version-control.scm | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)
Greg Hogan April 26, 2023, 7:03 p.m. UTC | #2 
v3 modifies the changes to git-minimal so that the older, pinned version
of git-minimal continues to pass the post-build check.

Greg Hogan (2):
  gnu: git: Update to 2.40.1 [security fixes].
  gnu: git-minimal: Check files exist before delete.

 gnu/packages/version-control.scm | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)
diff mbox series

Patch

diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm
index c2ec490383..5f6766f510 100644
--- a/gnu/packages/version-control.scm
+++ b/gnu/packages/version-control.scm
@@ -227,14 +227,14 @@  (define git-cross-configure-flags
 (define-public git
   (package
    (name "git")
-   (version "2.39.2")
+   (version "2.40.1")
    (source (origin
             (method url-fetch)
             (uri (string-append "mirror://kernel.org/software/scm/git/git-"
                                 version ".tar.xz"))
             (sha256
              (base32
-              "1mpjvhyw8mv2q941xny4d0gw3mb6b4bqaqbh73jd8b1v6zqpaps7"))))
+              "1li1xwgiwccy88bkshsah2kzl1006jg29jp7n32gvjggiswvi4s8"))))
    (build-system gnu-build-system)
    (native-inputs
     `(("native-perl" ,perl)
@@ -254,7 +254,7 @@  (define-public git
                 version ".tar.xz"))
           (sha256
            (base32
-            "09cva868qb4705s884dzvbwkm78jlw4q8m6xj7nd7cwxy2i2ff8b"))))
+            "04yy5za8963q6xzrirflvxbi1216jzqj8ssvgd9nkld3ifa9q1gy"))))
       ;; For subtree documentation.
       ("asciidoc" ,asciidoc)
       ("docbook2x" ,docbook2x)