From patchwork Mon Apr 18 14:23:47 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Zhu Zihao X-Patchwork-Id: 38652 Return-Path: X-Original-To: patchwork@mira.cbaines.net Delivered-To: patchwork@mira.cbaines.net Received: by mira.cbaines.net (Postfix, from userid 113) id 1F16927BBEA; Mon, 18 Apr 2022 15:25:36 +0100 (BST) X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on mira.cbaines.net X-Spam-Level: X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_INVALID, DKIM_SIGNED,FREEMAIL_FROM,MAILING_LIST_MULTI,SPF_HELO_PASS, URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.6 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mira.cbaines.net (Postfix) with ESMTPS id DCF8D27BBE9 for ; Mon, 18 Apr 2022 15:25:35 +0100 (BST) Received: from localhost ([::1]:49748 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ngSJr-0003e6-0i for patchwork@mira.cbaines.net; Mon, 18 Apr 2022 10:25:35 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:42324) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1ngSJN-0003cv-Le for guix-patches@gnu.org; Mon, 18 Apr 2022 10:25:06 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:46507) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1ngSJK-00047Q-KL for guix-patches@gnu.org; Mon, 18 Apr 2022 10:25:05 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ngSJK-0000QI-HG for guix-patches@gnu.org; Mon, 18 Apr 2022 10:25:02 -0400 X-Loop: help-debbugs@gnu.org Subject: [bug#55001] Acknowledgement ([PATCH] gnu: git: Update to 2.35.2 [fixes CVE-2022-24765].) Resent-From: Zhu Zihao Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Mon, 18 Apr 2022 14:25:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 55001 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 55001@debbugs.gnu.org Received: via spool by 55001-submit@debbugs.gnu.org id=B55001.16502918581549 (code B ref 55001); Mon, 18 Apr 2022 14:25:02 +0000 Received: (at 55001) by debbugs.gnu.org; 18 Apr 2022 14:24:18 +0000 Received: from localhost ([127.0.0.1]:40402 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ngSIb-0000Ov-Rh for submit@debbugs.gnu.org; Mon, 18 Apr 2022 10:24:18 -0400 Received: from mail-m973.mail.163.com ([123.126.97.3]:24901) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ngSIY-0000OQ-Hn for 55001@debbugs.gnu.org; Mon, 18 Apr 2022 10:24:16 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com; s=s110527; h=From:Subject:Date:Message-ID:MIME-Version; bh=z6IsC fqbXGgwPxqBoSM1fti9zIVGPVW+imnm2mAXbRo=; b=k8V4G/YNKRI1pGzTtaIJL TI/aeqLlmqL59pxfNSfJ0M1IjZcsuS9MHdcxFaLRAUXFXZqPzVKIvzru5ZQfRQQq zHMRYb0b3wTWhpSUaglqNpYdmRq6dPmdMtz4X1U8bwVGBrOn+kXfbwxsvar50ZSz wNfTaVe3ElRoCA7byAQpg4= Received: from asus-laptop (unknown [27.38.172.10]) by smtp3 (Coremail) with SMTP id G9xpCgDXgVaEdF1iLLbkBw--.42899S2; Mon, 18 Apr 2022 22:24:05 +0800 (CST) References: <8635iabj7y.fsf@163.com> User-agent: mu4e 1.6.10; emacs 27.2 From: Zhu Zihao Date: Mon, 18 Apr 2022 22:23:47 +0800 In-reply-to: Message-ID: <86y202a2rf.fsf@163.com> MIME-Version: 1.0 X-CM-TRANSID: G9xpCgDXgVaEdF1iLLbkBw--.42899S2 X-Coremail-Antispam: 1Uf129KBjDUn29KB7ZKAUJUUUUU529EdanIXcx71UUUUU7v73 VFW2AGmfu7bjvjm3AaLaJ3UbIYCTnIWIevJa73UjIFyTuYvjTRVBT0UUUUU X-Originating-IP: [27.38.172.10] X-CM-SenderInfo: pdoosuxxwbztlvw6il2tof0z/1tbiFBnmr1aEAQS2OgAAsf X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: guix-patches@gnu.org List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: "Guix-patches" X-getmail-retrieved-from-mailbox: Patches Update to 2.35.3 instead. From ecae314a30e43a4d706b68dc3345a2b32303e8fe Mon Sep 17 00:00:00 2001 From: Zhu Zihao Date: Mon, 18 Apr 2022 21:40:19 +0800 Subject: [PATCH] gnu: git: Update to 2.35.3 [fixes CVE-2022-24765]. See https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24765 * gnu/packages/version-control.scm (git): Update to 2.35.3. --- gnu/packages/version-control.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm index d77c2e51f6..1fbfe0b9bd 100644 --- a/gnu/packages/version-control.scm +++ b/gnu/packages/version-control.scm @@ -221,14 +221,14 @@ (define git-cross-configure-flags (define-public git (package (name "git") - (version "2.35.1") + (version "2.35.3") (source (origin (method url-fetch) (uri (string-append "mirror://kernel.org/software/scm/git/git-" version ".tar.xz")) (sha256 (base32 - "100h37cpw49pmlpf6lcpm1xi578gllf6y9in60h5mxj3cj754s6p")))) + "18hgw3g4vc78nk6lic2sbw0h22bwbh6a0qnb63zrzvgjkd7xps8m")))) (build-system gnu-build-system) (native-inputs `(("native-perl" ,perl) @@ -248,7 +248,7 @@ (define-public git version ".tar.xz")) (sha256 (base32 - "00rqdj2bc3i7pfc16pciiz50ww41jkqg18iy5hi5jnf0y98sgqz4")))) + "0973y7g356fjyrqxgvac04g3qhf6fbs3lzpizl1skkri0zh7x357")))) ;; For subtree documentation. ("asciidoc" ,asciidoc) ("docbook-xsl" ,docbook-xsl) -- 2.35.1