diff options
| author | leot <leot@pkgsrc.org> | 2020-04-14 18:27:31 +0000 |
|---|---|---|
| committer | leot <leot@pkgsrc.org> | 2020-04-14 18:27:31 +0000 |
| commit | f8bc73303d450adb50ff59091eb2b51095e116d0 (patch) | |
| tree | df42be169528e4ced972b71e4e5cbcbf1450e1d8 /devel/git-base | |
| parent | 6a93904fa3bb4e69c26c5757e3d9a7f23a1905df (diff) | |
| download | pkgsrc-f8bc73303d450adb50ff59091eb2b51095e116d0.tar.gz | |
git: Update to 2.26.1
Changes:
2.26.1
------
This release is to address the security issue: CVE-2020-5260
* With a crafted URL that contains a newline in it, the credential
helper machinery can be fooled to give credential information for
a wrong host. The attack has been made impossible by forbidding
a newline character in any value passed via the credential
protocol.
Credit for finding the vulnerability goes to Felix Wilhelm of Google
Project Zero.
Diffstat (limited to 'devel/git-base')
| -rw-r--r-- | devel/git-base/distinfo | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/devel/git-base/distinfo b/devel/git-base/distinfo index 2d9f5e68de0..d99c7235b28 100644 --- a/devel/git-base/distinfo +++ b/devel/git-base/distinfo @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.98 2020/04/02 07:46:42 adam Exp $ +$NetBSD: distinfo,v 1.99 2020/04/14 18:27:31 leot Exp $ -SHA1 (git-2.26.0.tar.xz) = 1580df90eecae21664646ac6eb7eba4af4934fe4 -RMD160 (git-2.26.0.tar.xz) = 5c8ae74bb7a3ca053e4a678debdaf1ff459b8081 -SHA512 (git-2.26.0.tar.xz) = bf8a832211782a9446d041a54da254f2586b894375191fb1a6dc7a6594856ca43230fa1ea804b54daceb68caa8d20c02bdbdbf7b2fa1761ce05a11a26b122a9b -Size (git-2.26.0.tar.xz) = 6005104 bytes +SHA1 (git-2.26.1.tar.xz) = 9ec4ef53d157cb376aaedc0ca529d3857c3f8bf6 +RMD160 (git-2.26.1.tar.xz) = a5ec065b66bfc3bb8baa42f7f864e73595d99fc6 +SHA512 (git-2.26.1.tar.xz) = 1defa0d94e26e474abd47ec8a0c43c05152e10a5aca5f1aee7480ef0db9f5abd03275fefb7c4e0ee816199c87c0b2a13c164c5f7aa5ff36cafdacf27b3573785 +Size (git-2.26.1.tar.xz) = 6006104 bytes SHA1 (patch-Documentation_Makefile) = 6025adac0fbb4b403f3954e6dac9d690dfb22daa SHA1 (patch-Makefile) = 73741b9d9a1b32bb47db48a7c546c4ff10fb41d6 SHA1 (patch-builtin_receive-pack.c) = 271df08d874a11b41f33aade64352040bc028fa2 |