Tue Apr 14 18:27:31 2020 UTC ()
git: Update to 2.26.1

Changes:
2.26.1
------
This release is to address the security issue: CVE-2020-5260

 * With a crafted URL that contains a newline in it, the credential
   helper machinery can be fooled to give credential information for
   a wrong host.  The attack has been made impossible by forbidding
   a newline character in any value passed via the credential
   protocol.

Credit for finding the vulnerability goes to Felix Wilhelm of Google
Project Zero.


(leot)
diff -r1.86 -r1.87 pkgsrc/devel/git/Makefile.version
diff -r1.98 -r1.99 pkgsrc/devel/git-base/distinfo
cvs diff -r1.86 -r1.87 pkgsrc/devel/git/Makefile.version (expand / switch to unified diff)

--- pkgsrc/devel/git/Makefile.version 2020/04/02 07:46:42 1.86
+++ pkgsrc/devel/git/Makefile.version 2020/04/14 18:27:31 1.87
@@ -1,7 +1,7 @@ @@ -1,7 +1,7 @@
1# $NetBSD: Makefile.version,v 1.86 2020/04/02 07:46:42 adam Exp $ 1# $NetBSD: Makefile.version,v 1.87 2020/04/14 18:27:31 leot Exp $
2# 2#
3# used by devel/git/Makefile.common 3# used by devel/git/Makefile.common
4# used by devel/git-cvs/Makefile 4# used by devel/git-cvs/Makefile
5# used by devel/git-svn/Makefile 5# used by devel/git-svn/Makefile
6 6
7GIT_VERSION= 2.26.0 7GIT_VERSION= 2.26.1
cvs diff -r1.98 -r1.99 pkgsrc/devel/git-base/distinfo (expand / switch to unified diff)

--- pkgsrc/devel/git-base/distinfo 2020/04/02 07:46:42 1.98
+++ pkgsrc/devel/git-base/distinfo 2020/04/14 18:27:31 1.99
@@ -1,13 +1,13 @@ @@ -1,13 +1,13 @@
1$NetBSD: distinfo,v 1.98 2020/04/02 07:46:42 adam Exp $ 1$NetBSD: distinfo,v 1.99 2020/04/14 18:27:31 leot Exp $
2 2
3SHA1 (git-2.26.0.tar.xz) = 1580df90eecae21664646ac6eb7eba4af4934fe4 3SHA1 (git-2.26.1.tar.xz) = 9ec4ef53d157cb376aaedc0ca529d3857c3f8bf6
4RMD160 (git-2.26.0.tar.xz) = 5c8ae74bb7a3ca053e4a678debdaf1ff459b8081 4RMD160 (git-2.26.1.tar.xz) = a5ec065b66bfc3bb8baa42f7f864e73595d99fc6
5SHA512 (git-2.26.0.tar.xz) = bf8a832211782a9446d041a54da254f2586b894375191fb1a6dc7a6594856ca43230fa1ea804b54daceb68caa8d20c02bdbdbf7b2fa1761ce05a11a26b122a9b 5SHA512 (git-2.26.1.tar.xz) = 1defa0d94e26e474abd47ec8a0c43c05152e10a5aca5f1aee7480ef0db9f5abd03275fefb7c4e0ee816199c87c0b2a13c164c5f7aa5ff36cafdacf27b3573785
6Size (git-2.26.0.tar.xz) = 6005104 bytes 6Size (git-2.26.1.tar.xz) = 6006104 bytes
7SHA1 (patch-Documentation_Makefile) = 6025adac0fbb4b403f3954e6dac9d690dfb22daa 7SHA1 (patch-Documentation_Makefile) = 6025adac0fbb4b403f3954e6dac9d690dfb22daa
8SHA1 (patch-Makefile) = 73741b9d9a1b32bb47db48a7c546c4ff10fb41d6 8SHA1 (patch-Makefile) = 73741b9d9a1b32bb47db48a7c546c4ff10fb41d6
9SHA1 (patch-builtin_receive-pack.c) = 271df08d874a11b41f33aade64352040bc028fa2 9SHA1 (patch-builtin_receive-pack.c) = 271df08d874a11b41f33aade64352040bc028fa2
10SHA1 (patch-config.mak.uname) = 5316873147acf5b6ef29e426946280bb6441c886 10SHA1 (patch-config.mak.uname) = 5316873147acf5b6ef29e426946280bb6441c886
11SHA1 (patch-git-gui_Makefile) = d00f4da74a437f3a58f0926f2407c974a8efc2c7 11SHA1 (patch-git-gui_Makefile) = d00f4da74a437f3a58f0926f2407c974a8efc2c7
12SHA1 (patch-gitk-git_Makefile) = e5d2112d158fe493a89b244a10d2e4b998a23d98 12SHA1 (patch-gitk-git_Makefile) = e5d2112d158fe493a89b244a10d2e4b998a23d98
13SHA1 (patch-templates_Makefile) = 4f0b9a5745203ea7ef369c8272b3ea7c644762f0 13SHA1 (patch-templates_Makefile) = 4f0b9a5745203ea7ef369c8272b3ea7c644762f0