[AUTO-CHERRYPICK] [HIGH] Upgrade: git version to 2.45.4 to fix CVE-2025-27614, CVE-2025-48384, CVE-2025-48385 & [MEDIUM] CVE-2025-27613 - branch 3.0-dev (#14308)

Co-authored-by: Archana Shettigar <[email protected]>

Author: CBL-Mariner-Bot

SPECS/git/git.signatures.json

@@ -1,5 +1,5 @@
 {
-  "Signatures": {
-    "git-2.45.3.tar.gz": "3075ec9cbcf44a72d7fb232191c0982d6676a1d7432d3c74b96d397ff874b071"
-  }
-}
+ "Signatures": {
+  "git-2.45.4.tar.gz": "edd4f60430139bbfc8b724eed3583502493f82c082ccf7760c8df1c432cfe4a3"
+ }
+}

SPECS/git/git.spec

@@ -6,8 +6,8 @@
 
 Summary:        Fast distributed version control system
 Name:           git
-Version:        2.45.3
-Release:        2%{?dist}
+Version:        2.45.4
+Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Azure Linux
@@ -106,7 +106,7 @@ BuildArch:      noarch
 %endif
 
 %prep
-%setup -q
+%autosetup
 %{py3_shebang_fix} git-p4.py
 
 %build
@@ -173,6 +173,9 @@ fi
 %endif
 
 %changelog
+* Fri Jul 11 2025 Archana Shettigar <[email protected]> - 2.45.4-1
+- Upgrade to 2.45.4 - CVE-2025-48384, CVE-2025-48385, CVE-2025-27613 & CVE-2025-27614
+
 * Thu Apr 17 2025 Muhammad Falak <[email protected]> - 2.45.3-2
 - Add dependency only for openssh-clients instead of openssh
 

cgmanifest.json

@@ -4360,8 +4360,8 @@
         "type": "other",
         "other": {
           "name": "git",
-          "version": "2.45.3",
-          "downloadUrl": "https://github.com/git/git/archive/refs/tags/v2.45.3.tar.gz"
+          "version": "2.45.4",
+          "downloadUrl": "https://github.com/git/git/archive/refs/tags/v2.45.4.tar.gz"
         }
       }
     },