diff options
| author |   Sam James <sam@gentoo.org> | 2022-04-13 23:56:35 +0100 |
|---|---|---|
| committer | Sam James <sam@gentoo.org> | 2022-04-13 23:56:35 +0100 |
| commit | afedd76307ba7fde47628d1dc84589a1d2ae9efc (patch) | |
| tree | f2b036af0dc82fd33d0e37f122502626a6d5288e /profiles | |
| parent | sys-apps/sysvinit: add 3.03, drop 3.02-r3 (diff) | |
| download | gentoo-afedd76307ba7fde47628d1dc84589a1d2ae9efc.tar.gz gentoo-afedd76307ba7fde47628d1dc84589a1d2ae9efc.tar.bz2 gentoo-afedd76307ba7fde47628d1dc84589a1d2ae9efc.zip | |
profiles: mask =dev-vcs/git-2.35.2
2.35.2 was a quick release to mitigate a security issue (bug #838127), but
introduces problems of its own with e.g. Portage. bug #838223. Pending
investigation both on the Portage side and potentially upstream (as there's
at least some UX issues with 2.35.2+ with the new "safe directory" mechanism).
Earlier versions are still safe as long as you do not use git commands
on a local repository controlled by a user you do not trust.
Closes: https://bugs.gentoo.org/838127
Closes: https://bugs.gentoo.org/838223
Signed-off-by: Sam James <sam@gentoo.org>
Diffstat (limited to 'profiles')
| -rw-r--r-- | profiles/package.mask | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/profiles/package.mask b/profiles/package.mask index 5f5615a78b9b..8947715862ef 100644 --- a/profiles/package.mask +++ b/profiles/package.mask @@ -33,6 +33,15 @@ #--- END OF EXAMPLES --- +# Sam James <sam@gentoo.org> (2022-04-13) +# 2.35.2 was a quick release to mitigate a security issue (bug #838127), but +# introduces problems of its own with e.g. Portage. bug #838223. Pending +# investigation both on the Portage side and potentially upstream (as there's +# at least some UX issues with 2.35.2+ with the new "safe directory" mechanism). +# Earlier versions are still safe as long as you do not use git commands +# on a local repository controlled by a user you do not trust. +=dev-vcs/git-2.35.2 + # Conrad Kostecki <conikost@gentoo.org> (2022-04-13) # Abandoned by upstream, does not work correctly anymore. # Removal on 2022-06-13. Bug #832431. |