Compare commits

...
Sign in to create a new pull request.

3 commits

Author SHA1 Message Date
Todd Zullinger
3988c2d30f Revert "revert to protocol v0 by default"
The patch applied to revert to protocol v0 by default causes at least
one test failure¹.  While I suspect this is an issue in the test suite,
without taking the time to prove that I cannot reasonably push the
change as an update.

Since we've had no bug reports files for issues with protocol v2 by
default, let's leave it as-is for the remainder of f32's life.

This reverts commit 83ca71dc73.

¹ The failure is in t5500-fetch-pack's "fetch with --filter=blob:limit=0
  and HTTP" test case.  From the test logs:

    ++ git -C client fetch --filter=blob:limit=0 origin HEAD:somewhere
    error: http://127.0.0.1:5500/smart/server did not send all necessary objects
    error: last command exited with $?=1
2021-03-10 12:02:59 -05:00
Todd Zullinger
e3f4910f7a update to 2.26.3
This release includes a fix for CVE-2021-21300¹.

Release notes:
https://github.com/git/git/raw/v2.26.3/Documentation/RelNotes/2.26.3.txt

¹ Per the 2.17.6 release notes on CVE-2021-21300:
    On case-insensitive file systems with support for symbolic links, if
    Git is configured globally to apply delay-capable clean/smudge
    filters (such as Git LFS), Git could be fooled into running remote
    code during a clone.
2021-03-09 14:07:02 -05:00
Todd Zullinger
83ca71dc73 revert to protocol v0 by default
The default fetch protocol was changed to v2 in 2.26.0.  Subsequently,
users of the linux-next and other kernel repositories have reported
significantly higher than expected sizes when fetching.  The cause was
tracked down and 2.27.0 will include a fix this issue.

Revert the protocol v0 by default in 2.26.0 using the patch from
Jonathan Nieder.

References:
11c7f2a30b
https://lore.kernel.org/git/20200422084254.GA27502@furthur.local/
2020-05-29 15:56:45 -04:00
2 changed files with 13 additions and 4 deletions

View file

@ -84,8 +84,8 @@
#global rcrev .rc0
Name: git
Version: 2.26.2
Release: 1%{?rcrev}%{?dist}
Version: 2.26.3
Release: 2%{?rcrev}%{?dist}
Summary: Fast Version Control System
License: GPLv2
URL: https://git-scm.com/
@ -1060,6 +1060,15 @@ rmdir --ignore-fail-on-non-empty "$testdir"
%{?with_docs:%{_pkgdocdir}/git-svn.html}
%changelog
* Wed Mar 10 2021 Todd Zullinger <tmz@pobox.com> - 2.26.3-2
- revert "revert to protocol v0 by default"
* Tue Mar 09 2021 Todd Zullinger <tmz@pobox.com> - 2.26.3-1
- update to 2.26.3 (CVE-2021-21300)
* Fri May 29 2020 Todd Zullinger <tmz@pobox.com> - 2.26.2-2
- revert to protocol v0 by default
* Mon Apr 20 2020 Todd Zullinger <tmz@pobox.com> - 2.26.2-1
- update to 2.26.2 (CVE-2020-11008)

View file

@ -1,2 +1,2 @@
SHA512 (git-2.26.2.tar.xz) = 5d92d07b171c5cd6e89a29c1211c73c1c900cd51c74d690aebfb4a3d0e93b541b09b42b6d6a1a82f5c3d953096771f9a8605c63be139f559f58698c1a0eabcfc
SHA512 (git-2.26.2.tar.sign) = c53a607eda0bf83bf3593e8d68b833ef3ee99976434a97def5dcc25f31e79ff3e79f832b61508509d43d3111df106dde80ff6c9f7ada34ae53e7b4da17b06ed7
SHA512 (git-2.26.3.tar.xz) = a88f8ab156f12770590110b30da83631f19a349f3b7af25fd0a5e8f03c78daec0a4935e9a1a5637f100c147cc57fca4aa3386e18756a6382983e7baa7456e398
SHA512 (git-2.26.3.tar.sign) = a1ece2c1f12832e9ae017e1d7d6930bb8db9a1b73e638dd2a443eb45d61a4c09e5a74a5de1a424bd1b988e8ec4ac00d84659ff8690593ffb069e42f5a07a1fb5