[AUTOPATCHER-CORE] Upgrade git to 2.45.3 CVE-2024-50349 and CVE-2024-…

…52006 (#11904)

Co-authored-by: Sam Meluch <[email protected]>
Co-authored-by: Sam Meluch <[email protected]>
Co-authored-by: jslobodzian <[email protected]>
Co-authored-by: Suresh Thelkar <[email protected]>
(cherry picked from commit 98aff0a)

SPECS/git/git.signatures.json

@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "git-2.45.2.tar.xz": "51bfe87eb1c02fed1484051875365eeab229831d30d0cec5d89a14f9e40e9adb"
+    "git-2.45.3.tar.gz": "3075ec9cbcf44a72d7fb232191c0982d6676a1d7432d3c74b96d397ff874b071"
   }
 }

SPECS/git/git.spec

@@ -6,14 +6,14 @@
 
 Summary:        Fast distributed version control system
 Name:           git
-Version:        2.45.2
+Version:        2.45.3
 Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
 Group:          System Environment/Programming
 URL:            https://git-scm.com/
-Source0:        https://www.kernel.org/pub/software/scm/git/%{name}-%{version}.tar.xz
+Source0:        https://github.com/git/git/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 BuildRequires:  curl-devel
 BuildRequires:  python3-devel
 Requires:       curl
@@ -110,6 +110,7 @@ BuildArch:      noarch
 %{py3_shebang_fix} git-p4.py
 
 %build
+make configure
 %configure \
     CFLAGS="%{optflags}" \
     CXXFLAGS="%{optflags}" \
@@ -172,6 +173,9 @@ fi
 %endif
 
 %changelog
+* Tue Jan 14 2025 CBL-Mariner Servicing Account <[email protected]> - 2.45.3-1
+- Auto-upgrade to 2.45.3 - CVE-2024-50349 and CVE-2024-52006
+
 * Fri Jul 05 2024 CBL-Mariner Servicing Account <[email protected]> - 2.45.2-1
 - Auto-upgrade to 2.45.2 - none
 

cgmanifest.json

@@ -4300,8 +4300,8 @@
         "type": "other",
         "other": {
           "name": "git",
-          "version": "2.45.2",
-          "downloadUrl": "https://www.kernel.org/pub/software/scm/git/git-2.45.2.tar.xz"
+          "version": "2.45.3",
+          "downloadUrl": "https://github.com/git/git/archive/refs/tags/v2.45.3.tar.gz"
         }
       }
     },