[bug#32043] [PATCH] gnu: libgit2: Update to 0.26.4 [fixes CVE-2018-11235].

[Marius Bakke]

Leo Famulari <address@hidden> writes:

> * gnu/packages/version-control.scm (libgit2): Update to 0.26.4.
> (source): Adjust patch name.
> * gnu/packages/patches/libgit2-0.25.1-mtime-0.patch: Rename to ...
> * gnu/packages/patches/julia-libgit2-fix.patch: ... this.
> * gnu/local.mk (dist_patch_DATA): Adjust accordingly.
> ---
>  gnu/local.mk                                  |  2 +-
>  gnu/packages/patches/julia-libgit2-fix.patch  | 22 +++++++++++++++++++
>  .../patches/libgit2-0.25.1-mtime-0.patch      | 14 ------------
>  gnu/packages/version-control.scm              |  6 ++---
>  4 files changed, 26 insertions(+), 18 deletions(-)
>  create mode 100644 gnu/packages/patches/julia-libgit2-fix.patch
>  delete mode 100644 gnu/packages/patches/libgit2-0.25.1-mtime-0.patch

'libgit2-mtime-0.patch' seems to have disappeared, yet it's in the
(patches) field of libgit2.  I suppose it got unstaged somehow?

'julia-libgit2-fix.patch' seems unrelated, so the commit message should
probably not say renamed.  And I would guess it should be applied to the
Julia package.  It would be nice with a link to the upstream commit too!

Time for a holiday perhaps? ;-)

LGTM with those adjustments!

signature.asc
Description: PGP signature