GNU bug report logs - #58644
[PATCH] gnu: git: Update to 2.38.1.

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 58644 in the body.
You can then email your comments to 58644 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Greg Hogan <code <at> greghogan.com>
To: guix-patches <at> gnu.org
Cc: Greg Hogan <code <at> greghogan.com>
Subject: [PATCH] gnu: git: Update to 2.38.1.
Date: Wed, 19 Oct 2022 20:13:15 +0000

Fixes CVE-2022-39253 and CVE-2022-39260.

* gnu/packages/version-control.scm (git): Update to 2.38.1.
---
 gnu/packages/version-control.scm | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gnu/packages/version-control.scm b/gnu/packages/version-control.scm
index d8d4a77341..524afaa837 100644
--- a/gnu/packages/version-control.scm
+++ b/gnu/packages/version-control.scm
@@ -223,14 +223,14 @@ (define git-cross-configure-flags
 (define-public git
   (package
    (name "git")
-   (version "2.38.0")
+   (version "2.38.1")
    (source (origin
             (method url-fetch)
             (uri (string-append "mirror://kernel.org/software/scm/git/git-"
                                 version ".tar.xz"))
             (sha256
              (base32
-              "02ij201lyipv1w2zkcq4ng2bga2xkw58xnkbs1wdw50qdgiasglj"))))
+              "1n8afjjim30lddhm25cdscdr2xfa518293jhqbxy1fd2b3mgipcp"))))
    (build-system gnu-build-system)
    (native-inputs
     `(("native-perl" ,perl)
@@ -250,7 +250,7 @@ (define-public git
                 version ".tar.xz"))
           (sha256
            (base32
-            "1qyn6rhwblshz0hp0kdc8lk22c1fv8avfr44sia0vzlbd82xj828"))))
+            "0qyn6rhwblshz0hp0kdc8lk22c1fv8avfr44sia0vzlbd82xj828"))))
       ;; For subtree documentation.
       ("asciidoc" ,asciidoc)
       ("docbook-xsl" ,docbook-xsl)
-- 
2.38.0

Message #10 received at 58644-done <at> debbugs.gnu.org (full text, mbox):

From: Ludovic Courtès <ludo <at> gnu.org>
To: Greg Hogan <code <at> greghogan.com>
Cc: 58644-done <at> debbugs.gnu.org
Subject: Re: bug#58644: [PATCH] gnu: git: Update to 2.38.1.
Date: Tue, 08 Nov 2022 14:07:27 +0100

Hi Greg,

Greg Hogan <code <at> greghogan.com> skribis:

> Fixes CVE-2022-39253 and CVE-2022-39260.
>
> * gnu/packages/version-control.scm (git): Update to 2.38.1.

Sorry for the delay.  Applied, thanks!

There was a hash mismatch for git-manpages-2.38.1.tar.xz.  I downloaded
it, check the signature, and changed it accordingly.

Ludo’.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.