linux/poky.git/meta/recipes-devtools/git, branch yocto-5.0.9

git: upgrade 2.44.0 -> 2.44.1

2024-06-14T12:19:22+00:00

Addresses the security issues - CVE-2024-32002, CVE-2024-32004, CVE-2024-32020,CVE-2024-32021 and CVE-2024-32465 Changelog: ========== https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.44.1.txt (From OE-Core rev: 3a7ef46ebaf8d4b470ef5b6803dc3b76c22a97c2) Signed-off-by: Soumya Sambu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 767f9515013790c9a6b945fae9de03c9e5b89b80) Signed-off-by: Steve Sakoman

git: set --with-gitconfig=/etc/gitconfig for -native builds

2024-06-05T12:57:12+00:00

Commit 6c2ae2346db0 (kern-tools: depend on git-replacement-native) broke our kernel builds. For saving space and time, we have a DL_DIR shared between multiple users/buildbots, not all of which run with the same uid (and with appropriate sticky bits set so that files downloaded by one user become owned by a common group and are readable by others). This works fine also for git sources because the docker images we use all have a /etc/gitconfig with [safe] directory = * But with the mentioned commit, the host's git is no longer used for do_unpack (nor for do_fetch if re-building and sysroot has already been populated by a previous build), causing spurious "fatal: detected dubious ownership..." failures. Currently, the path where the git-native binary searches for system gitconfig is the sysroot from it was built, which obviously doesn't contain a /etc/gitconfig. As for the nativesdk variant, respect the host's /etc/gitconfig if present. (From OE-Core rev: a3f5ac9f9fee2c8e10fec7c3f758e49513fef724) Signed-off-by: Rasmus Villemoes Signed-off-by: Richard Purdie (cherry picked from commit 572f511f7ff02fb559ac42d2d5dbd09fec478d97) Signed-off-by: Steve Sakoman

git: git-replacement-native: depend on ca-certificate

2024-03-18T12:21:45+00:00

git is delegating webacces for URLs using TLS to libcurl. However our native libcurl build does not find a ca-certificate.crt unless its curl-native work dir still exists and thus git will fail. If a recipe uses AUTOREV with a git repo using https as its protocol parsing of that recipe will fail fetching the latest HEAD. Fix that by depending on ca-certificate and give its location to libcurl via git's envrironment variable GIT_SSL_CAINFO. (From OE-Core rev: 2e99ffda70fd95b5eab3de47048032349cd66f4b) Signed-off-by: Max Krummenacher Signed-off-by: Richard Purdie

git: upgrade 2.43.0 -> 2.44.0

2024-03-01T09:28:51+00:00

Changelog: ========== https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.44.0.txt (From OE-Core rev: 238ba27471fdbd2b22ab0812c4058ec43f19c4a7) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

git: upgrade 2.42.1 -> 2.43.0

2023-11-30T08:43:03+00:00

Changelog: ========== https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.0.txt (From OE-Core rev: fcd5d85de18073f9c062a4f88d9f239d0672f5be) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

git: upgrade 2.42.0 -> 2.42.1

2023-11-20T15:30:52+00:00

(From OE-Core rev: 5daa97e427031d472ca4409e28df897897cb8818) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

git: upgrade 2.41.0 -> 2.42.0

2023-09-02T17:23:05+00:00

(From OE-Core rev: a2524932909680cb3e8ed146f650e7acaa9dbbe7) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

git: upgrade 2.39.3 -> 2.41.0

2023-07-25T14:27:33+00:00

Changelog for 2.41.0: https://github.com/git/git/blob/master/Documentation/RelNotes/2.41.0.txt Changelog for 2.40.0: https://github.com/git/git/blob/master/Documentation/RelNotes/2.40.0.txt git-add--interactive was removed in 2.40.0 in favor of git add -i, which caused the AUH upgrade failure as that PERLTOOLS entry was no longer relevant. (From OE-Core rev: 60ff9714328ada93029bde6623f64977178a2de0) Signed-off-by: Trevor Gamblin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

cve_check: convert CVE_CHECK_IGNORE to CVE_STATUS

2023-07-21T10:52:26+00:00

- Try to add convert and apply statuses for old CVEs - Drop some obsolete ignores, while they are not relevant for current version (From OE-Core rev: 1634ed4048cf56788cd5c2c1bdc979b70afcdcd7) Signed-off-by: Andrej Valek Reviewed-by: Peter Marko Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

git: upgrade to 2.39.3

2023-06-06T06:41:42+00:00

This minor point release fixes CVE-2023-25652 and CVE-2023-29007. (From OE-Core rev: 469c28924ab9debe810e3277b27ad936781e7ce5) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie