From 9d18ef6a0cbe81c01118f12c72eb99c09fce0994 Mon Sep 17 00:00:00 2001 From: Peter Seiderer Date: Wed, 18 Jan 2023 22:35:17 +0100 Subject: [PATCH] package/git: security bump to version 2.39.1 - fixes CVE-2022-41903 and CVE-2022-23521 For details see [1]. [1] https://lore.kernel.org/git/xmqq7cxl9h0i.fsf@gitster.g/ Signed-off-by: Peter Seiderer Tested-by: Bagas Sanjaya [Peter: Mark as security bump] Signed-off-by: Peter Korsgaard --- package/git/git.hash | 2 +- package/git/git.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/git/git.hash b/package/git/git.hash index 57a77b2810..75398896e5 100644 --- a/package/git/git.hash +++ b/package/git/git.hash @@ -1,5 +1,5 @@ # From: https://www.kernel.org/pub/software/scm/git/sha256sums.asc -sha256 ba199b13fb5a99ca3dec917b0bd736bc0eb5a9df87737d435eddfdf10d69265b git-2.39.0.tar.xz +sha256 40a38a0847b30c371b35873b3afcf123885dd41ea3ecbbf510efa97f3ce5c161 git-2.39.1.tar.xz # Locally calculated sha256 5b2198d1645f767585e8a88ac0499b04472164c0d2da22e75ecf97ef443ab32e COPYING sha256 1922f45d2c49e390032c9c0ba6d7cac904087f7cec51af30c2b2ad022ce0e76a LGPL-2.1 diff --git a/package/git/git.mk b/package/git/git.mk index 9918d4c1ef..1d728e1964 100644 --- a/package/git/git.mk +++ b/package/git/git.mk @@ -4,7 +4,7 @@ # ################################################################################ -GIT_VERSION = 2.39.0 +GIT_VERSION = 2.39.1 GIT_SOURCE = git-$(GIT_VERSION).tar.xz GIT_SITE = $(BR2_KERNEL_MIRROR)/software/scm/git GIT_LICENSE = GPL-2.0, LGPL-2.1+