[Bug 254170] devel/git: Update to 2.30.2

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Tue Mar 9 20:27:59 UTC 2021


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254170

            Bug ID: 254170
           Summary: devel/git: Update to 2.30.2
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
               URL: https://public-inbox.org/git/xmqqim6019yd.fsf@gitster.
                    c.googlers.com/T/#u
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: garga at FreeBSD.org
          Reporter: yasu at utahime.org
             Flags: maintainer-feedback?(garga at FreeBSD.org)
          Assignee: garga at FreeBSD.org

Created attachment 223132
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=223132&action=edit
Patch file

Update to 2.30.2.

Release Note:
https://public-inbox.org/git/xmqqim6019yd.fsf@gitster.c.googlers.com/T/#u

This release contains security fix of CVE-2021-21300. But in the release note
it is explained as following.

* CVE-2021-21300:
  On case-insensitive file systems with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone.

And it doesn't apply to FreeBSD. So this isn't security update for us.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list