Re: update git to 2.19.1 (CVE-2018-17456)

On 05/10/2018 23:22, Klemens Nanni wrote:
> https://marc.info/?l=git&m=153875888916397&w=2
>
> These releases fix a security flaw (CVE-2018-17456), which allowed an
> attacker to execute arbitrary code by crafting a malicious .gitmodules
> file in a project cloned with --recurse-submodules.
>
> OK?

ok benoit@

>
> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/devel/git/Makefile,v
> retrieving revision 1.193
> diff -u -p -r1.193 Makefile
> --- Makefile 13 Sep 2018 05:59:22 -0000 1.193
> +++ Makefile 5 Oct 2018 21:10:09 -0000
> @@ -4,7 +4,7 @@ COMMENT-main = GIT - Tree History Storag
> COMMENT-svn = GIT - subversion interoperability tools
> COMMENT-x11 = GIT - graphical tools
>
> -V = 2.19.0
> +V = 2.19.1
> DISTNAME = git-${V}
> PKGNAME-main = ${DISTNAME}
> PKGNAME-svn = git-svn-${V}
> Index: distinfo
> ===================================================================
> RCS file: /cvs/ports/devel/git/distinfo,v
> retrieving revision 1.146
> diff -u -p -r1.146 distinfo
> --- distinfo 13 Sep 2018 05:59:22 -0000 1.146
> +++ distinfo 5 Oct 2018 21:10:33 -0000
> @@ -1,4 +1,4 @@
> -SHA256 (git-2.19.0.tar.gz) = 4OGFsZ1ubKpY3eBaGjMhSXddaKmUbydPQaG9fblyz1U=
> -SHA256 (git-manpages-2.19.0.tar.gz) = CC23Rz05ALeD5nHaCU3atZN8VZ9zIagJh6Q5rDzoTfQ=
> -SIZE (git-2.19.0.tar.gz) = 7708477
> -SIZE (git-manpages-2.19.0.tar.gz) = 702323
> +SHA256 (git-2.19.1.tar.gz) = 7E3JZFZhLGW/bZRM7prGQBRexyRTdoMreBywPpfLt5Y=
> +SHA256 (git-manpages-2.19.1.tar.gz) = vSf1jckKZh4wgLlzZetzIr+hhd6VY0/FnZgxGSWn2JQ=
> +SIZE (git-2.19.1.tar.gz) = 7708143
> +SIZE (git-manpages-2.19.1.tar.gz) = 702313
>