From 4990d3c5f8437ded5cb5276e9a9db22f7e33303e Mon Sep 17 00:00:00 2001 From: Michael Weiss Date: Tue, 9 Mar 2021 20:04:30 +0100 Subject: [PATCH] git: 2.30.1 -> 2.30.2 (CVE-2021-21300) Links for the security issue: - https://lore.kernel.org/git/xmqqim6019yd.fsf@gitster.c.googlers.com/ - https://github.com/git/git/security/advisories/GHSA-8prw-h3cq-mghm - https://github.blog/2021-03-09-git-clone-vulnerability-announced/ For some reason meta.changelog was using ${version} instead of v${version} for the tag name. This is fixed now. --- .../version-management/git-and-tools/git/default.nix | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/pkgs/applications/version-management/git-and-tools/git/default.nix b/pkgs/applications/version-management/git-and-tools/git/default.nix index 5d1589446bef..9ed530f9a232 100644 --- a/pkgs/applications/version-management/git-and-tools/git/default.nix +++ b/pkgs/applications/version-management/git-and-tools/git/default.nix @@ -24,7 +24,7 @@ assert sendEmailSupport -> perlSupport; assert svnSupport -> perlSupport; let - version = "2.30.1"; + version = "2.30.2"; svn = subversionClient.override { perlBindings = perlSupport; }; gitwebPerlLibs = with perlPackages; [ CGI HTMLParser CGIFast FCGI FCGIProcManager HTMLTagCloud ]; @@ -36,7 +36,7 @@ stdenv.mkDerivation { src = fetchurl { url = "https://www.kernel.org/pub/software/scm/git/git-${version}.tar.xz"; - sha256 = "0rwlbps9x8kgk2hsm0bvsrkpsk9bnbnz8alknbd7i688jnhai27r"; + sha256 = "1ajz6lng6yldqm66lhrjfgbbxk09rq8cngv7hz9nqizrf46dkxs1"; }; outputs = [ "out" ] ++ lib.optional withManual "doc"; @@ -336,7 +336,7 @@ stdenv.mkDerivation { homepage = "https://git-scm.com/"; description = "Distributed version control system"; license = lib.licenses.gpl2; - changelog = "https://raw.githubusercontent.com/git/git/${version}/Documentation/RelNotes/${version}.txt"; + changelog = "https://github.com/git/git/blob/v${version}/Documentation/RelNotes/${version}.txt"; longDescription = '' Git, a popular distributed version control system designed to