https://marc.info/?l=git&m=153875888916397&w=2
These releases fix a security flaw (CVE-2018-17456), which allowed an attacker to execute arbitrary code by crafting a malicious .gitmodules file in a project cloned with --recurse-submodules. OK? Index: Makefile =================================================================== RCS file: /cvs/ports/devel/git/Makefile,v retrieving revision 1.193 diff -u -p -r1.193 Makefile --- Makefile 13 Sep 2018 05:59:22 -0000 1.193 +++ Makefile 5 Oct 2018 21:10:09 -0000 @@ -4,7 +4,7 @@ COMMENT-main = GIT - Tree History Storag COMMENT-svn = GIT - subversion interoperability tools COMMENT-x11 = GIT - graphical tools -V = 2.19.0 +V = 2.19.1 DISTNAME = git-${V} PKGNAME-main = ${DISTNAME} PKGNAME-svn = git-svn-${V} Index: distinfo =================================================================== RCS file: /cvs/ports/devel/git/distinfo,v retrieving revision 1.146 diff -u -p -r1.146 distinfo --- distinfo 13 Sep 2018 05:59:22 -0000 1.146 +++ distinfo 5 Oct 2018 21:10:33 -0000 @@ -1,4 +1,4 @@ -SHA256 (git-2.19.0.tar.gz) = 4OGFsZ1ubKpY3eBaGjMhSXddaKmUbydPQaG9fblyz1U= -SHA256 (git-manpages-2.19.0.tar.gz) = CC23Rz05ALeD5nHaCU3atZN8VZ9zIagJh6Q5rDzoTfQ= -SIZE (git-2.19.0.tar.gz) = 7708477 -SIZE (git-manpages-2.19.0.tar.gz) = 702323 +SHA256 (git-2.19.1.tar.gz) = 7E3JZFZhLGW/bZRM7prGQBRexyRTdoMreBywPpfLt5Y= +SHA256 (git-manpages-2.19.1.tar.gz) = vSf1jckKZh4wgLlzZetzIr+hhd6VY0/FnZgxGSWn2JQ= +SIZE (git-2.19.1.tar.gz) = 7708143 +SIZE (git-manpages-2.19.1.tar.gz) = 702313