Compare commits
14 commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
da35363f19 | ||
|
|
c488c27117 | ||
|
6c89b0ef9d | ||
|
|
8f542b0496 | ||
|
|
ba249bb3a1 | ||
|
|
8e9df669b8 | ||
|
4cf7527c99 | ||
|
|
90cb7985fd | ||
|
fc75418e16 | ||
|
|
54ed4ea4ba | ||
|
|
001bf29ac7 | ||
|
|
a0b3d1a02b | ||
|
|
9a2fecfe2e | ||
|
|
716550b90a |
3 changed files with 349 additions and 40 deletions
275
git-2.52-sanitize-sideband-channel-messages.patch
Normal file
275
git-2.52-sanitize-sideband-channel-messages.patch
Normal file
|
|
@ -0,0 +1,275 @@
|
|||
From 65e88e659008e2cbf79cf44975406ff0d569a3a9 Mon Sep 17 00:00:00 2001
|
||||
From: =?UTF-8?q?Ond=C5=99ej=20Poho=C5=99elsk=C3=BD?= <opohorel@redhat.com>
|
||||
Date: Thu, 20 Nov 2025 12:24:59 +0100
|
||||
Subject: [PATCH] sideband: mask control characters
|
||||
MIME-Version: 1.0
|
||||
Content-Type: text/plain; charset=UTF-8
|
||||
Content-Transfer-Encoding: 8bit
|
||||
|
||||
The output of `git clone` is a vital component for understanding what
|
||||
has happened when things go wrong. However, these logs are partially
|
||||
under the control of the remote server (via the "sideband", which
|
||||
typically contains what the remote `git pack-objects` process sends to
|
||||
`stderr`), and is currently not sanitized by Git.
|
||||
|
||||
This makes Git susceptible to ANSI escape sequence injection (see
|
||||
CWE-150, https://cwe.mitre.org/data/definitions/150.html), which allows
|
||||
attackers to corrupt terminal state, to hide information, and even to
|
||||
insert characters into the input buffer (i.e. as if the user had typed
|
||||
those characters).
|
||||
|
||||
To plug this vulnerability, disallow any control character in the
|
||||
sideband, replacing them instead with the common `^<letter/symbol>`
|
||||
(e.g. `^[` for `\x1b`, `^A` for `\x01`).
|
||||
|
||||
There is likely a need for more fine-grained controls instead of using a
|
||||
"heavy hammer" like this, which will be introduced subsequently.
|
||||
|
||||
Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
|
||||
|
||||
sideband: introduce an "escape hatch" to allow control characters
|
||||
|
||||
The preceding commit fixed the vulnerability whereas sideband messages
|
||||
(that are under the control of the remote server) could contain ANSI
|
||||
escape sequences that would be sent to the terminal verbatim.
|
||||
|
||||
However, this fix may not be desirable under all circumstances, e.g.
|
||||
when remote servers deliberately add coloring to their messages to
|
||||
increase their urgency.
|
||||
|
||||
To help with those use cases, give users a way to opt-out of the
|
||||
protections: `sideband.allowControlCharacters`.
|
||||
|
||||
Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
|
||||
|
||||
sideband: do allow ANSI color sequences by default
|
||||
|
||||
The preceding two commits introduced special handling of the sideband
|
||||
channel to neutralize ANSI escape sequences before sending the payload
|
||||
to the terminal, and `sideband.allowControlCharacters` to override that
|
||||
behavior.
|
||||
|
||||
However, some `pre-receive` hooks that are actively used in practice
|
||||
want to color their messages and therefore rely on the fact that Git
|
||||
passes them through to the terminal.
|
||||
|
||||
In contrast to other ANSI escape sequences, it is highly unlikely that
|
||||
coloring sequences can be essential tools in attack vectors that mislead
|
||||
Git users e.g. by hiding crucial information.
|
||||
|
||||
Therefore we can have both: Continue to allow ANSI coloring sequences to
|
||||
be passed to the terminal, and neutralize all other ANSI escape
|
||||
sequences.
|
||||
|
||||
Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
|
||||
|
||||
sideband: default to allowControlCharacters=true
|
||||
|
||||
We don't want to change the default Git behaviour, just add the option
|
||||
to filter control characters.
|
||||
|
||||
Signed-off-by: Ondřej Pohořelský <opohorel@redhat.com>
|
||||
---
|
||||
Documentation/config.adoc | 2 +
|
||||
Documentation/config/sideband.adoc | 16 ++++++
|
||||
sideband.c | 78 ++++++++++++++++++++++++++++-
|
||||
t/t5409-colorize-remote-messages.sh | 31 ++++++++++++
|
||||
4 files changed, 125 insertions(+), 2 deletions(-)
|
||||
create mode 100644 Documentation/config/sideband.adoc
|
||||
|
||||
diff --git a/Documentation/config.adoc b/Documentation/config.adoc
|
||||
index 62eebe7c54..dcea3c0c15 100644
|
||||
--- a/Documentation/config.adoc
|
||||
+++ b/Documentation/config.adoc
|
||||
@@ -523,6 +523,8 @@ include::config/sequencer.adoc[]
|
||||
|
||||
include::config/showbranch.adoc[]
|
||||
|
||||
+include::config/sideband.adoc[]
|
||||
+
|
||||
include::config/sparse.adoc[]
|
||||
|
||||
include::config/splitindex.adoc[]
|
||||
diff --git a/Documentation/config/sideband.adoc b/Documentation/config/sideband.adoc
|
||||
new file mode 100644
|
||||
index 0000000000..c9ba24a02c
|
||||
--- /dev/null
|
||||
+++ b/Documentation/config/sideband.adoc
|
||||
@@ -0,0 +1,16 @@
|
||||
+sideband.allowControlCharacters::
|
||||
+ By default, control characters that are delivered via the sideband
|
||||
+ are NOT masked. Use this config setting to prevent potentially
|
||||
+ unwanted ANSI escape sequences from being sent to the terminal:
|
||||
++
|
||||
+--
|
||||
+ color::
|
||||
+ Allow ANSI color sequences, line feeds and horizontal tabs,
|
||||
+ but mask all other control characters.
|
||||
+ false::
|
||||
+ Mask all control characters other than line feeds and
|
||||
+ horizontal tabs.
|
||||
+ true::
|
||||
+ Allow all control characters to be sent to the terminal.
|
||||
+ This is the default.
|
||||
+--
|
||||
\ No newline at end of file
|
||||
diff --git a/sideband.c b/sideband.c
|
||||
index ea7c25211e..88d1b44a7a 100644
|
||||
--- a/sideband.c
|
||||
+++ b/sideband.c
|
||||
@@ -26,6 +26,12 @@ static struct keyword_entry keywords[] = {
|
||||
{ "error", GIT_COLOR_BOLD_RED },
|
||||
};
|
||||
|
||||
+static enum {
|
||||
+ ALLOW_NO_CONTROL_CHARACTERS = 0,
|
||||
+ ALLOW_ALL_CONTROL_CHARACTERS = 1,
|
||||
+ ALLOW_ANSI_COLOR_SEQUENCES = 2
|
||||
+} allow_control_characters = ALLOW_ALL_CONTROL_CHARACTERS;
|
||||
+
|
||||
/* Returns a color setting (GIT_COLOR_NEVER, etc). */
|
||||
static enum git_colorbool use_sideband_colors(void)
|
||||
{
|
||||
@@ -39,6 +45,25 @@ static enum git_colorbool use_sideband_colors(void)
|
||||
if (use_sideband_colors_cached != GIT_COLOR_UNKNOWN)
|
||||
return use_sideband_colors_cached;
|
||||
|
||||
+ switch (repo_config_get_maybe_bool(the_repository, "sideband.allowcontrolcharacters", &i)) {
|
||||
+ case 0: /* Boolean value */
|
||||
+ allow_control_characters = i ? ALLOW_ALL_CONTROL_CHARACTERS :
|
||||
+ ALLOW_NO_CONTROL_CHARACTERS;
|
||||
+ break;
|
||||
+ case -1: /* non-Boolean value */
|
||||
+ if (repo_config_get_string_tmp(the_repository, "sideband.allowcontrolcharacters",
|
||||
+ &value))
|
||||
+ ; /* huh? `get_maybe_bool()` returned -1 */
|
||||
+ else if (!strcmp(value, "color"))
|
||||
+ allow_control_characters = ALLOW_ANSI_COLOR_SEQUENCES;
|
||||
+ else
|
||||
+ warning(_("unrecognized value for `sideband."
|
||||
+ "allowControlCharacters`: '%s'"), value);
|
||||
+ break;
|
||||
+ default:
|
||||
+ break; /* not configured */
|
||||
+ }
|
||||
+
|
||||
if (!repo_config_get_string_tmp(the_repository, key, &value))
|
||||
use_sideband_colors_cached = git_config_colorbool(key, value);
|
||||
else if (!repo_config_get_string_tmp(the_repository, "color.ui", &value))
|
||||
@@ -66,6 +91,55 @@ void list_config_color_sideband_slots(struct string_list *list, const char *pref
|
||||
list_config_item(list, prefix, keywords[i].keyword);
|
||||
}
|
||||
|
||||
+static int handle_ansi_color_sequence(struct strbuf *dest, const char *src, int n)
|
||||
+{
|
||||
+ int i;
|
||||
+
|
||||
+ /*
|
||||
+ * Valid ANSI color sequences are of the form
|
||||
+ *
|
||||
+ * ESC [ [<n> [; <n>]*] m
|
||||
+ */
|
||||
+
|
||||
+ if (allow_control_characters != ALLOW_ANSI_COLOR_SEQUENCES ||
|
||||
+ n < 3 || src[0] != '\x1b' || src[1] != '[')
|
||||
+ return 0;
|
||||
+
|
||||
+ for (i = 2; i < n; i++) {
|
||||
+ if (src[i] == 'm') {
|
||||
+ strbuf_add(dest, src, i + 1);
|
||||
+ return i;
|
||||
+ }
|
||||
+ if (!isdigit(src[i]) && src[i] != ';')
|
||||
+ break;
|
||||
+ }
|
||||
+
|
||||
+ return 0;
|
||||
+}
|
||||
+
|
||||
+static void strbuf_add_sanitized(struct strbuf *dest, const char *src, int n)
|
||||
+{
|
||||
+ int i;
|
||||
+
|
||||
+ if (allow_control_characters == ALLOW_ALL_CONTROL_CHARACTERS) {
|
||||
+ strbuf_add(dest, src, n);
|
||||
+ return;
|
||||
+ }
|
||||
+
|
||||
+ strbuf_grow(dest, n);
|
||||
+ for (; n && *src; src++, n--) {
|
||||
+ if (!iscntrl(*src) || *src == '\t' || *src == '\n')
|
||||
+ strbuf_addch(dest, *src);
|
||||
+ else if ((i = handle_ansi_color_sequence(dest, src, n))) {
|
||||
+ src += i;
|
||||
+ n -= i;
|
||||
+ } else {
|
||||
+ strbuf_addch(dest, '^');
|
||||
+ strbuf_addch(dest, 0x40 + *src);
|
||||
+ }
|
||||
+ }
|
||||
+}
|
||||
+
|
||||
/*
|
||||
* Optionally highlight one keyword in remote output if it appears at the start
|
||||
* of the line. This should be called for a single line only, which is
|
||||
@@ -81,7 +155,7 @@ static void maybe_colorize_sideband(struct strbuf *dest, const char *src, int n)
|
||||
int i;
|
||||
|
||||
if (!want_color_stderr(use_sideband_colors())) {
|
||||
- strbuf_add(dest, src, n);
|
||||
+ strbuf_add_sanitized(dest, src, n);
|
||||
return;
|
||||
}
|
||||
|
||||
@@ -114,7 +188,7 @@ static void maybe_colorize_sideband(struct strbuf *dest, const char *src, int n)
|
||||
}
|
||||
}
|
||||
|
||||
- strbuf_add(dest, src, n);
|
||||
+ strbuf_add_sanitized(dest, src, n);
|
||||
}
|
||||
|
||||
|
||||
diff --git a/t/t5409-colorize-remote-messages.sh b/t/t5409-colorize-remote-messages.sh
|
||||
index fa5de4500a..2d40d8c640 100755
|
||||
--- a/t/t5409-colorize-remote-messages.sh
|
||||
+++ b/t/t5409-colorize-remote-messages.sh
|
||||
@@ -98,4 +98,35 @@ test_expect_success 'fallback to color.ui' '
|
||||
grep "<BOLD;RED>error<RESET>: error" decoded
|
||||
'
|
||||
|
||||
+test_expect_success 'disallow (color) control sequences in sideband' '
|
||||
+ write_script .git/color-me-surprised <<-\EOF &&
|
||||
+ printf "error: Have you \\033[31mread\\033[m this?\\a\\n" >&2
|
||||
+ exec "$@"
|
||||
+ EOF
|
||||
+ test_config_global uploadPack.packObjectshook ./color-me-surprised &&
|
||||
+ test_commit need-at-least-one-commit &&
|
||||
+
|
||||
+ git -c sideband.allowControlCharacters=color \
|
||||
+ clone --no-local . throw-away 2>stderr &&
|
||||
+ test_decode_color <stderr >decoded &&
|
||||
+ test_grep RED decoded &&
|
||||
+ test_grep "\\^G" stderr &&
|
||||
+ tr -dc "\\007" <stderr >actual &&
|
||||
+ test_must_be_empty actual &&
|
||||
+
|
||||
+ rm -rf throw-away &&
|
||||
+ git -c sideband.allowControlCharacters=false \
|
||||
+ clone --no-local . throw-away 2>stderr &&
|
||||
+ test_decode_color <stderr >decoded &&
|
||||
+ test_grep ! RED decoded &&
|
||||
+ test_grep "\\^G" stderr &&
|
||||
+
|
||||
+ rm -rf throw-away &&
|
||||
+ git -c sideband.allowControlCharacters clone --no-local . throw-away 2>stderr &&
|
||||
+ test_decode_color <stderr >decoded &&
|
||||
+ test_grep RED decoded &&
|
||||
+ tr -dc "\\007" <stderr >actual &&
|
||||
+ test_file_not_empty actual
|
||||
+'
|
||||
+
|
||||
test_done
|
||||
--
|
||||
2.51.1
|
||||
|
||||
110
git.spec
110
git.spec
|
|
@ -78,8 +78,8 @@
|
|||
%global _package_note_file %{_builddir}/%{name}-%{real_version}/.package_note-%{name}-%{version}-%{release}.%{_arch}.ld
|
||||
|
||||
Name: git
|
||||
Version: 2.48.1
|
||||
Release: 2%{?dist}
|
||||
Version: 2.52.0
|
||||
Release: 1%{?dist}
|
||||
Summary: Fast Version Control System
|
||||
License: BSD-3-Clause AND GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later AND MIT
|
||||
URL: https://git-scm.com/
|
||||
|
|
@ -132,6 +132,13 @@ Patch3: 0003-t-lib-git-svn-try-harder-to-find-a-port.patch
|
|||
# Prevents t5540 failures on i686, s390x and ppc64le
|
||||
Patch5: git-test-apache-davlockdbtype-config.patch
|
||||
|
||||
# Adds the option to sanitize sideband channel messages
|
||||
# CVE-2024-52005 wasn't fixed by upstream. This patch adds the option to harden Git against it.
|
||||
# The default behaviour of Git remains unchanged.
|
||||
#
|
||||
# https://github.com/gitgitgadget/git/pull/1853
|
||||
Patch6: git-2.52-sanitize-sideband-channel-messages.patch
|
||||
|
||||
%if %{with docs}
|
||||
# pod2man is needed to build Git.3pm
|
||||
BuildRequires: perl-podlators
|
||||
|
|
@ -142,7 +149,6 @@ BuildRequires: rubygem-asciidoctor
|
|||
BuildRequires: asciidoc >= 8.4.1
|
||||
%endif
|
||||
# endif with asciidoctor
|
||||
BuildRequires: perl(File::Compare)
|
||||
BuildRequires: xmlto
|
||||
%if %{with linkcheck}
|
||||
BuildRequires: linkchecker
|
||||
|
|
@ -172,7 +178,6 @@ BuildRequires: openssl-devel
|
|||
BuildRequires: pcre2-devel
|
||||
BuildRequires: perl(Error)
|
||||
BuildRequires: perl(lib)
|
||||
BuildRequires: perl(Test)
|
||||
%if %{use_perl_generators}
|
||||
BuildRequires: perl-generators
|
||||
%endif
|
||||
|
|
@ -225,7 +230,7 @@ BuildRequires: glibc-langpack-is
|
|||
BuildRequires: gnupg2-smime
|
||||
%endif
|
||||
# endif fedora or el >= 9
|
||||
%if 0%{?fedora} || ( 0%{?rhel} >= 7 && ( "%{_arch}" == "ppc64le" || "%{_arch}" == "x86_64" ) )
|
||||
%if 0%{?fedora} || 0%{?rhel} >= 8 || ( 0%{?rhel} == 7 && ( "%{_arch}" == "ppc64le" || "%{_arch}" == "x86_64" ) )
|
||||
BuildRequires: highlight
|
||||
%endif
|
||||
# endif fedora or el7+ (ppc64le/x86_64)
|
||||
|
|
@ -429,7 +434,7 @@ Summary: Git repository browser
|
|||
BuildArch: noarch
|
||||
Requires: git = %{version}-%{release}
|
||||
Requires: git-gui = %{version}-%{release}
|
||||
Requires: tk >= 8.4
|
||||
Requires: tk
|
||||
%description -n gitk
|
||||
%{summary}.
|
||||
|
||||
|
|
@ -536,7 +541,7 @@ install -p -m 755 %{SOURCE99} print-failed-test-output
|
|||
# Remove git-archimport
|
||||
sed -i '/^SCRIPT_PERL += git-archimport\.perl$/d' Makefile
|
||||
sed -i '/^git-archimport/d' command-list.txt
|
||||
rm git-archimport.perl Documentation/git-archimport.txt
|
||||
rm git-archimport.perl Documentation/git-archimport.adoc
|
||||
|
||||
%if %{without cvs}
|
||||
# Remove git-cvs* from command list
|
||||
|
|
@ -598,6 +603,9 @@ EOF
|
|||
%endif
|
||||
# endif ! defined perl_bootstrap
|
||||
|
||||
# Exclude sample hook files from automatic dependency detection
|
||||
%global __requires_exclude_from ^%{_datadir}/git-core/templates/hooks/.*sample$
|
||||
|
||||
# Remove Git::LoadCPAN to ensure we use only system perl modules. This also
|
||||
# allows the dependencies to be automatically processed by rpm.
|
||||
rm -rf perl/Git/LoadCPAN{.pm,/}
|
||||
|
|
@ -609,7 +617,7 @@ sed -i 's@"++GITWEB_HOME_LINK_STR++"@$ENV{"SERVER_NAME"} ? "git://" . $ENV{"SERV
|
|||
|
||||
# Move contrib/{contacts,subtree} docs to Documentation so they build with the
|
||||
# proper asciidoc/docbook/xmlto options
|
||||
mv contrib/{contacts,subtree}/git-*.txt Documentation/
|
||||
mv contrib/{contacts,subtree}/git-*.adoc Documentation/
|
||||
|
||||
%build
|
||||
# Improve build reproducibility
|
||||
|
|
@ -727,13 +735,6 @@ mkdir -p %{buildroot}%{_datadir}/git-core/contrib/completion
|
|||
install -pm 644 contrib/completion/git-completion.tcsh \
|
||||
%{buildroot}%{_datadir}/git-core/contrib/completion/
|
||||
|
||||
# Move contrib/hooks out of %%docdir
|
||||
mkdir -p %{buildroot}%{_datadir}/git-core/contrib
|
||||
mv contrib/hooks %{buildroot}%{_datadir}/git-core/contrib
|
||||
pushd contrib > /dev/null
|
||||
ln -s ../../../git-core/contrib/hooks
|
||||
popd > /dev/null
|
||||
|
||||
# Install git-prompt.sh
|
||||
mkdir -p %{buildroot}%{_datadir}/git-core/contrib/completion
|
||||
install -pm 644 contrib/completion/git-prompt.sh \
|
||||
|
|
@ -776,7 +777,7 @@ grep -E "$not_core_re" bin-man-doc-files > bin-man-doc-git-files
|
|||
# contrib
|
||||
not_core_doc_re="(git-(cvs|gui|citool|daemon|instaweb|subtree))|p4|svn|email|gitk|gitweb"
|
||||
mkdir -p %{buildroot}%{_pkgdocdir}/
|
||||
cp -pr CODE_OF_CONDUCT.md README.md Documentation/*.txt Documentation/RelNotes contrib %{buildroot}%{_pkgdocdir}/
|
||||
cp -pr CODE_OF_CONDUCT.md README.md Documentation/*.adoc Documentation/RelNotes contrib %{buildroot}%{_pkgdocdir}/
|
||||
# Remove contrib/ files/dirs which have nothing useful for documentation
|
||||
rm -rf %{buildroot}%{_pkgdocdir}/contrib/{contacts,credential}/
|
||||
cp -p gitweb/INSTALL %{buildroot}%{_pkgdocdir}/INSTALL.gitweb
|
||||
|
|
@ -868,6 +869,17 @@ GIT_SKIP_TESTS="$GIT_SKIP_TESTS t5300.1[02348] t5300.2[03459] t5300.30 t5300.4[5
|
|||
%endif
|
||||
# endif rhel == 8 && arch == s390x
|
||||
|
||||
%if "%{_arch}" == "s390x"
|
||||
# Skip tests which fail on s390x
|
||||
#
|
||||
# The following tests are failing on s390x.
|
||||
# https://lore.kernel.org/git/4dc4c8cd-c0cc-4784-8fcf-defa3a051087@mit.edu/
|
||||
#
|
||||
# t8020.16 'cross merge boundaries in blaming'
|
||||
# t8020.19 'last-modified merge undoes changes'
|
||||
GIT_SKIP_TESTS="$GIT_SKIP_TESTS t8020.16 t8020.19"
|
||||
%endif
|
||||
# endif "%{_arch}" == "s390x"
|
||||
export GIT_SKIP_TESTS
|
||||
|
||||
# Set LANG so various UTF-8 tests are run
|
||||
|
|
@ -913,11 +925,6 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
|
||||
%files -f bin-man-doc-git-files
|
||||
%{_datadir}/git-core/contrib/diff-highlight
|
||||
%{_datadir}/git-core/contrib/hooks/update-paranoid
|
||||
%{_datadir}/git-core/contrib/hooks/setgitperms.perl
|
||||
%{_datadir}/git-core/templates/hooks/fsmonitor-watchman.sample
|
||||
%{_datadir}/git-core/templates/hooks/pre-rebase.sample
|
||||
%{_datadir}/git-core/templates/hooks/prepare-commit-msg.sample
|
||||
|
||||
%files all
|
||||
# No files for you!
|
||||
|
|
@ -929,11 +936,6 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
%license COPYING
|
||||
# exclude is best way here because of troubles with symlinks inside git-core/
|
||||
%exclude %{_datadir}/git-core/contrib/diff-highlight
|
||||
%exclude %{_datadir}/git-core/contrib/hooks/update-paranoid
|
||||
%exclude %{_datadir}/git-core/contrib/hooks/setgitperms.perl
|
||||
%exclude %{_datadir}/git-core/templates/hooks/fsmonitor-watchman.sample
|
||||
%exclude %{_datadir}/git-core/templates/hooks/pre-rebase.sample
|
||||
%exclude %{_datadir}/git-core/templates/hooks/prepare-commit-msg.sample
|
||||
%{bash_completions_dir}/git
|
||||
%{_datadir}/git-core/
|
||||
|
||||
|
|
@ -943,7 +945,6 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
%exclude %{_pkgdocdir}/contrib/*/*.py[co]
|
||||
%endif
|
||||
# endif rhel <= 7
|
||||
%{_pkgdocdir}/contrib/hooks
|
||||
|
||||
%if %{with libsecret}
|
||||
%files credential-libsecret
|
||||
|
|
@ -953,7 +954,7 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
|
||||
%if %{with cvs}
|
||||
%files cvs
|
||||
%{_pkgdocdir}/*git-cvs*.txt
|
||||
%{_pkgdocdir}/*git-cvs*.adoc
|
||||
%{_bindir}/git-cvsserver
|
||||
%{gitexecdir}/*cvs*
|
||||
%{?with_docs:%{_mandir}/man1/*cvs*.1*}
|
||||
|
|
@ -962,7 +963,7 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
# endif with cvs
|
||||
|
||||
%files daemon
|
||||
%{_pkgdocdir}/git-daemon*.txt
|
||||
%{_pkgdocdir}/git-daemon*.adoc
|
||||
%{_unitdir}/git.socket
|
||||
%config(noreplace) %{_unitdir}/git@.service
|
||||
%{gitexecdir}/git-daemon
|
||||
|
|
@ -971,13 +972,13 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
%{?with_docs:%{_pkgdocdir}/git-daemon*.html}
|
||||
|
||||
%files email
|
||||
%{_pkgdocdir}/*email*.txt
|
||||
%{_pkgdocdir}/*email*.adoc
|
||||
%{gitexecdir}/*email*
|
||||
%{?with_docs:%{_mandir}/man1/*email*.1*}
|
||||
%{?with_docs:%{_pkgdocdir}/*email*.html}
|
||||
|
||||
%files -n gitk
|
||||
%{_pkgdocdir}/*gitk*.txt
|
||||
%{_pkgdocdir}/*gitk*.adoc
|
||||
%{_bindir}/*gitk*
|
||||
%{_datadir}/gitk
|
||||
%{bash_completions_dir}/gitk
|
||||
|
|
@ -986,7 +987,7 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
|
||||
%files -n gitweb
|
||||
%{_pkgdocdir}/*.gitweb
|
||||
%{_pkgdocdir}/gitweb*.txt
|
||||
%{_pkgdocdir}/gitweb*.adoc
|
||||
%{?with_docs:%{_mandir}/man1/gitweb.1*}
|
||||
%{?with_docs:%{_mandir}/man5/gitweb.conf.5*}
|
||||
%{?with_docs:%{_pkgdocdir}/gitweb*.html}
|
||||
|
|
@ -999,8 +1000,8 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
%{gitexecdir}/git-citool
|
||||
%{_datadir}/applications/*git-gui.desktop
|
||||
%{_datadir}/git-gui/
|
||||
%{_pkgdocdir}/git-gui.txt
|
||||
%{_pkgdocdir}/git-citool.txt
|
||||
%{_pkgdocdir}/git-gui.adoc
|
||||
%{_pkgdocdir}/git-citool.adoc
|
||||
%{?with_docs:%{_mandir}/man1/git-gui.1*}
|
||||
%{?with_docs:%{_pkgdocdir}/git-gui.html}
|
||||
%{?with_docs:%{_mandir}/man1/git-citool.1*}
|
||||
|
|
@ -1008,7 +1009,7 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
|
||||
%files instaweb
|
||||
%{gitexecdir}/git-instaweb
|
||||
%{_pkgdocdir}/git-instaweb.txt
|
||||
%{_pkgdocdir}/git-instaweb.adoc
|
||||
%{?with_docs:%{_mandir}/man1/git-instaweb.1*}
|
||||
%{?with_docs:%{_pkgdocdir}/git-instaweb.html}
|
||||
|
||||
|
|
@ -1016,7 +1017,7 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
%files p4
|
||||
%{gitexecdir}/*p4*
|
||||
%{gitexecdir}/mergetools/p4merge
|
||||
%{_pkgdocdir}/*p4*.txt
|
||||
%{_pkgdocdir}/*p4*.adoc
|
||||
%{?with_docs:%{_mandir}/man1/*p4*.1*}
|
||||
%{?with_docs:%{_pkgdocdir}/*p4*.html}
|
||||
%endif
|
||||
|
|
@ -1029,17 +1030,50 @@ rmdir --ignore-fail-on-non-empty "$testdir"
|
|||
|
||||
%files subtree
|
||||
%{gitexecdir}/git-subtree
|
||||
%{_pkgdocdir}/git-subtree.txt
|
||||
%{_pkgdocdir}/git-subtree.adoc
|
||||
%{?with_docs:%{_mandir}/man1/git-subtree.1*}
|
||||
%{?with_docs:%{_pkgdocdir}/git-subtree.html}
|
||||
|
||||
%files svn
|
||||
%{gitexecdir}/git-svn
|
||||
%{_pkgdocdir}/git-svn.txt
|
||||
%{_pkgdocdir}/git-svn.adoc
|
||||
%{?with_docs:%{_mandir}/man1/git-svn.1*}
|
||||
%{?with_docs:%{_pkgdocdir}/git-svn.html}
|
||||
|
||||
%changelog
|
||||
* Thu Nov 20 2025 Ondřej Pohořelský <opohorel@redhat.com> - 2.52.0-1
|
||||
- update to 2.52.0
|
||||
|
||||
* Thu Oct 23 2025 Ondřej Pohořelský <opohorel@redhat.com> - 2.51.1-1
|
||||
- update to 2.51.1
|
||||
|
||||
* Sun Oct 12 2025 Yaakov Selkowitz <yselkowi@redhat.com> - 2.51.0-3
|
||||
- Revbump for tcl/tk 9
|
||||
|
||||
* Thu Aug 21 2025 Ondřej Pohořelský <opohorel@redhat.com> - 2.51.0-2
|
||||
- exclude sample hook files from automatic dependency detection
|
||||
|
||||
* Wed Aug 20 2025 Ondřej Pohořelský <opohorel@redhat.com> - 2.51.0-1
|
||||
- update to 2.51.0
|
||||
|
||||
* Wed Jul 23 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.50.1-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
|
||||
|
||||
* Tue Jul 08 2025 Ondřej Pohořelský <opohorel@redhat.com> - 2.50.1-1
|
||||
- update to 2.50.1
|
||||
|
||||
* Mon Jun 23 2025 Ondřej Pohořelský <opohorel@redhat.com> - 2.50.0-1
|
||||
- update to 2.50.0
|
||||
|
||||
* Mon Mar 24 2025 Ondřej Pohořelský <opohorel@redhat.com> - 2.49.0-2
|
||||
- add the option to sanitize sideband channel messages
|
||||
|
||||
* Mon Mar 17 2025 Ondřej Pohořelský <opohorel@redhat.com> - 2.49.0-1
|
||||
- update to 2.49.0
|
||||
|
||||
* Thu Feb 6 2025 Yanko Kaneti <yaneti@declera.com> - 2.48.1-3
|
||||
- Keep gitk on tcl/tk 8.x until its ready for 9
|
||||
|
||||
* Thu Jan 16 2025 Fedora Release Engineering <releng@fedoraproject.org> - 2.48.1-2
|
||||
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
|
||||
|
||||
|
|
|
|||
4
sources
4
sources
|
|
@ -1,2 +1,2 @@
|
|||
SHA512 (git-2.48.1.tar.xz) = 75c89ab4ca83adc46989a4b05a9b482b40a7ba69d15aa1c1f27d0cee37c2908e154a75d59b0a0a540647352b9c55020f1a5ad309f0eff78e9fd8e631ef9e4606
|
||||
SHA512 (git-2.48.1.tar.sign) = 6d2308a71970940288137df76122ac402d1e5fdd2250fce5e6d4681d68b630bcfc109e56e4539598c6b5113024c78a25193d3b8d38c39ee547a37c1d8b2f4d15
|
||||
SHA512 (git-2.52.0.tar.xz) = 965e5ebb72d1f080d64e34bdb75f0bb1689c9dd41dcf63b020d986bad49808ac09bfb1115962bc0c5b95bac8622367ac4cd09aa89266f73d2137fe94c90dd3ed
|
||||
SHA512 (git-2.52.0.tar.sign) = a5a68ce131a5763650c477ec01a4de958dd6a946bdea0f613e26bdab41d2df6b3ca63f9028bbe603bf0c834bd415c86e6c616b1ff08cc48aa7c3c61a37b24b74
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue