Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package git for openSUSE:Factory checked in at 2022-04-16 00:14:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/git (Old) and /work/SRC/openSUSE:Factory/.git.new.1941 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "git" Sat Apr 16 00:14:08 2022 rev:276 rq:970347 version:2.35.3 Changes: -------- --- /work/SRC/openSUSE:Factory/git/git.changes 2022-03-18 16:41:24.749150241 +0100 +++ /work/SRC/openSUSE:Factory/.git.new.1941/git.changes 2022-04-16 00:14:28.453667125 +0200 @@ -1,0 +2,25 @@ +Thu Apr 14 06:01:19 UTC 2022 - Andreas Stieger <andreas.stie...@gmx.de> + +- git 2.35.3: + * usability fix-up for CVE-2022-24765 bsc#1198234: + '*' can be used as the value for the `safe.directory` variable + to signal that the user considers that any directory is safe. + * The code that was meant to parse the new `safe.directory` + configuration variable was not checking what configuration + variable was being fed to it + +------------------------------------------------------------------- +Wed Apr 13 13:13:13 UTC 2022 - o...@aepfle.de + +- Require bash in git-daemon because the service file uses it +- Reword git-daemon.service description to get a useful sentence + in journalctl -b + +------------------------------------------------------------------- +Tue Apr 12 17:56:41 UTC 2022 - Andreas Stieger <andreas.stie...@gmx.de> + +- git 2.35.2 (CVE-2022-24765, bsc#1198234): + * CVE-2022-24765: git may execute commands defined by other users + from unexpected worktrees + +------------------------------------------------------------------- @@ -116,0 +142 @@ +- Require nogroup group for %pre (bsc#1192023) Old: ---- git-2.35.1.tar.sign git-2.35.1.tar.xz New: ---- git-2.35.3.tar.sign git-2.35.3.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ git.spec ++++++ --- /var/tmp/diff_new_pack.tGnXkf/_old 2022-04-16 00:14:29.833668967 +0200 +++ /var/tmp/diff_new_pack.tGnXkf/_new 2022-04-16 00:14:29.837668973 +0200 @@ -36,7 +36,7 @@ %bcond_with asciidoctor %endif Name: git -Version: 2.35.1 +Version: 2.35.3 Release: 0 Summary: Fast, scalable, distributed revision control system License: GPL-2.0-only @@ -246,6 +246,7 @@ %package daemon Summary: Simple Server for Git Repositories Group: Development/Tools/Version Control +Requires: bash Requires: git-core = %{version} Requires(pre): %fillup_prereq %if 0%{?suse_version} >= 1500 ++++++ git-2.35.1.tar.xz -> git-2.35.3.tar.xz ++++++ /work/SRC/openSUSE:Factory/git/git-2.35.1.tar.xz /work/SRC/openSUSE:Factory/.git.new.1941/git-2.35.3.tar.xz differ: char 15, line 1 ++++++ git-daemon.service ++++++ --- /var/tmp/diff_new_pack.tGnXkf/_old 2022-04-16 00:14:29.921669085 +0200 +++ /var/tmp/diff_new_pack.tGnXkf/_new 2022-04-16 00:14:29.921669085 +0200 @@ -1,5 +1,5 @@ [Unit] -Description=Start Git Daemon +Description=Git Daemon [Service] # added automatically, for details please see