commit: afedd76307ba7fde47628d1dc84589a1d2ae9efc Author: Sam James <sam <AT> gentoo <DOT> org> AuthorDate: Wed Apr 13 22:56:35 2022 +0000 Commit: Sam James <sam <AT> gentoo <DOT> org> CommitDate: Wed Apr 13 22:56:35 2022 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=afedd763
profiles: mask =dev-vcs/git-2.35.2 2.35.2 was a quick release to mitigate a security issue (bug #838127), but introduces problems of its own with e.g. Portage. bug #838223. Pending investigation both on the Portage side and potentially upstream (as there's at least some UX issues with 2.35.2+ with the new "safe directory" mechanism). Earlier versions are still safe as long as you do not use git commands on a local repository controlled by a user you do not trust. Closes: https://bugs.gentoo.org/838127 Closes: https://bugs.gentoo.org/838223 Signed-off-by: Sam James <sam <AT> gentoo.org> profiles/package.mask | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/profiles/package.mask b/profiles/package.mask index 5f5615a78b9b..8947715862ef 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -33,6 +33,15 @@ #--- END OF EXAMPLES --- +# Sam James <s...@gentoo.org> (2022-04-13) +# 2.35.2 was a quick release to mitigate a security issue (bug #838127), but +# introduces problems of its own with e.g. Portage. bug #838223. Pending +# investigation both on the Portage side and potentially upstream (as there's +# at least some UX issues with 2.35.2+ with the new "safe directory" mechanism). +# Earlier versions are still safe as long as you do not use git commands +# on a local repository controlled by a user you do not trust. +=dev-vcs/git-2.35.2 + # Conrad Kostecki <conik...@gentoo.org> (2022-04-13) # Abandoned by upstream, does not work correctly anymore. # Removal on 2022-06-13. Bug #832431.
