From patchwork Wed Apr 26 16:40:50 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Greg Hogan X-Patchwork-Id: 49544 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 7CCBB27BBE9; Wed, 26 Apr 2023 17:42:29 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-3.7 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,MAILING_LIST_MULTI,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id 6F95E27BBE2 for ; Wed, 26 Apr 2023 17:42:27 +0100 (BST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1priDV-0006Xk-9M; Wed, 26 Apr 2023 12:42:05 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1priDT-0006Xa-2z for guix-patches@gnu.org; Wed, 26 Apr 2023 12:42:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1priDS-00017G-RL for guix-patches@gnu.org; Wed, 26 Apr 2023 12:42:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1priDS-0000rt-Ag for guix-patches@gnu.org; Wed, 26 Apr 2023 12:42:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#63092] [PATCH] gnu: git: Update to 2.40.1 [security fixes]. Resent-From: Greg Hogan Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 26 Apr 2023 16:42:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 63092 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 63092@debbugs.gnu.org Cc: Greg Hogan X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16825272723267 (code B ref -1); Wed, 26 Apr 2023 16:42:02 +0000 Received: (at submit) by debbugs.gnu.org; 26 Apr 2023 16:41:12 +0000 Received: from localhost ([127.0.0.1]:56866 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1priCe-0000qd-1V for submit@debbugs.gnu.org; Wed, 26 Apr 2023 12:41:12 -0400 Received: from lists.gnu.org ([209.51.188.17]:42334) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1priCV-0000qI-51 for submit@debbugs.gnu.org; Wed, 26 Apr 2023 12:41:10 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1priCT-0006Hp-CE for guix-patches@gnu.org; Wed, 26 Apr 2023 12:41:01 -0400 Received: from mail-yw1-x1131.google.com ([2607:f8b0:4864:20::1131]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1priCO-0000xQ-OG for guix-patches@gnu.org; Wed, 26 Apr 2023 12:41:01 -0400 Received: by mail-yw1-x1131.google.com with SMTP id 00721157ae682-54fb9b1a421so56809697b3.1 for ; Wed, 26 Apr 2023 09:40:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=greghogan-com.20221208.gappssmtp.com; s=20221208; t=1682527255; x=1685119255; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=diKSJfXYOfclswwwxkmUVpv39bW4eFqsdWIq2RiFhlM=; b=MPJc9Eu7hdbzSeM0weT2ttb1/oRHFpJSvAV77h9g6/Shf3yGOR5W6tu4oxkhH2rOtm QVnxRM22d1yEdt4+Hm+4AgMinadnoI6uiBPYdyIhczhpnC05E4oPxn1vo7kZhh9dYA5v fHRmvPX6ryQbdJ2Zdsls0U6BvhqUwzGZqONQSw6nxgM1u3NuDnQSxjv7w53iRZY4vECV 1uh8RwtHF36gqdm8++HPLOtVgtg0h7LkRxtVz+sDqH2+VmveusqO+WIAmXq3lCp28dKX A4KMaWmBBpXxNCSRpby948Xcnxur0/eJiwG5VBFFGq+lAet3PhoitfQVtJCYyRURY3hv v7gQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1682527255; x=1685119255; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=diKSJfXYOfclswwwxkmUVpv39bW4eFqsdWIq2RiFhlM=; b=AXFWlo8SlsJS3i+BHYEvAE4sERLWyMzfnQvaWu8gI7p23lfkx5dFG4lUEfF+68VFfT 4JpauUdappRJSxNdrdVTvVaEbwLV/NvwBGRPck6yWf4n2MZlS3WylAYQ3xdbhbLpydgY +MryN3yF8fswWHcwuXDj8YrBO7OK3yyZGuk4Yd6Sf7Q5JyXMbpJkT8B9qLn2zhodAsv2 jAb/AE3XNk3R07f7K4UmulPJuthShErUY/w2rer8+qIbHZa98WXyo9dnFCkbEoskXTgK OhtFjnlMHzVTYdZCWglSS+WvcxvJHSYK3qAqkTjxQ+hCG1b+s4nc0auFPL62sbmNgmFm 7C+w== X-Gm-Message-State: AAQBX9fqvCAVkwysNgaVrj9roA/lLRK639SYIYGik/h8y28By9oIoELg DQzpEGxlcbSXRbBVJ2Nsr9NpyYuFdZjpaC+PvVZ5lg== X-Google-Smtp-Source: AKy350aHzov8WIy3KbkIr2dPgyrrhbT+PBruUZ1sbW4DA9K6bnoXv9dul63YNBXd0vXst1kd/or5tQ== X-Received: by 2002:a81:48cb:0:b0:54f:881e:75bb with SMTP id v194-20020a8148cb000000b0054f881e75bbmr14288539ywa.45.1682527254965; Wed, 26 Apr 2023 09:40:54 -0700 (PDT) Received: from ip-172-31-16-142.us-east-2.compute.internal (ec2-18-219-13-189.us-east-2.compute.amazonaws.com. [18.219.13.189]) by smtp.gmail.com with ESMTPSA id v20-20020a814814000000b00545a08184f2sm4320047ywa.130.2023.04.26.09.40.54 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 26 Apr 2023 09:40:54 -0700 (PDT) From: Greg Hogan Date: Wed, 26 Apr 2023 16:40:50 +0000 Message-Id: <20230426164050.2007012-1-code@greghogan.com> X-Mailer: git-send-email 2.40.0 MIME-Version: 1.0 Received-SPF: none client-ip=2607:f8b0:4864:20::1131; envelope-from=code@greghogan.com; helo=mail-yw1-x1131.google.com X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches Fixes CVE-2023-25652 and CVE-2023-29007. * gnu/packages/version-control.scm (git): Update to 2.40.1. --- gnu/packages/version-control.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm index c2ec490383..5f6766f510 100644 --- a/gnu/packages/version-control.scm +++ b/gnu/packages/version-control.scm @@ -227,14 +227,14 @@ (define git-cross-configure-flags (define-public git (package (name "git") - (version "2.39.2") + (version "2.40.1") (source (origin (method url-fetch) (uri (string-append "mirror://kernel.org/software/scm/git/git-" version ".tar.xz")) (sha256 (base32 - "1mpjvhyw8mv2q941xny4d0gw3mb6b4bqaqbh73jd8b1v6zqpaps7")))) + "1li1xwgiwccy88bkshsah2kzl1006jg29jp7n32gvjggiswvi4s8")))) (build-system gnu-build-system) (native-inputs `(("native-perl" ,perl) @@ -254,7 +254,7 @@ (define-public git version ".tar.xz")) (sha256 (base32 - "09cva868qb4705s884dzvbwkm78jlw4q8m6xj7nd7cwxy2i2ff8b")))) + "04yy5za8963q6xzrirflvxbi1216jzqj8ssvgd9nkld3ifa9q1gy")))) ;; For subtree documentation. ("asciidoc" ,asciidoc) ("docbook2x" ,docbook2x)