On 2025/07/09 13:53, Theo Buehler wrote:
> Simple update to fix a bunch of security issues - I unexpectedly had to
> fiddle with git submodules, so I preferred having the RCE out of the way:
> 
> https://www.openwall.com/lists/oss-security/2025/07/08/4
> 
> I guess this should also go to stable.

yes please (in this case I'd suggest syncing the whole lot from -current
including the MP patches, rather than going for 2.49.1).

> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/devel/git/Makefile,v
> diff -u -p -r1.289 Makefile
> --- Makefile	4 Jul 2025 19:13:12 -0000	1.289
> +++ Makefile	9 Jul 2025 10:39:32 -0000
> @@ -2,7 +2,7 @@ COMMENT-main =	distributed version contr
>  COMMENT-svn =	subversion interoperability tools
>  COMMENT-x11 =	graphical tools
>  
> -V =		2.50.0
> +V =		2.50.1
>  DISTNAME =	git-${V}
>  CATEGORIES =	devel
>  
> Index: distinfo
> ===================================================================
> RCS file: /cvs/ports/devel/git/distinfo,v
> diff -u -p -r1.211 distinfo
> --- distinfo	4 Jul 2025 19:13:12 -0000	1.211
> +++ distinfo	9 Jul 2025 10:39:40 -0000
> @@ -1,4 +1,4 @@
> -SHA256 (git-2.50.0.tar.gz) = kg+MpWPRan1P3stENJy/+8XLgUqLNslgKEY0eBlwUNo=
> -SHA256 (git-manpages-2.50.0.tar.gz) = LlSFMCpgxpHnzrj9mU2AsE/Mm9ktqsBQvwY/mgl0z6Y=
> -SIZE (git-2.50.0.tar.gz) = 11752430
> -SIZE (git-manpages-2.50.0.tar.gz) = 1023099
> +SHA256 (git-2.50.1.tar.gz) = Ui0WNfi2K0hLDOJJk4GKrTyrjhHrtX4Za9o4oxQOqRU=
> +SHA256 (git-manpages-2.50.1.tar.gz) = lgiMWDEpyX7ZorAXcbiyitednymXtGeGYW3z40sYDuQ=
> +SIZE (git-2.50.1.tar.gz) = 11755615
> +SIZE (git-manpages-2.50.1.tar.gz) = 1023050
>