DEP8 failure: cannot add submodule using file transport

Bug #1999511 reported by Andreas Hasenack
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
git (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

The git security update for CVE 2022-39253 changed a config setting to disallow the file transport submodule by default. This is resulting in DEP8 tests failing all over the place:

$ git submodule add ../repo3 sub3
Cloning into '/tmp/test-pyus71xi-check-manifest/repo2/sub3'...
fatal: transport 'file' not allowed
fatal: clone of '/tmp/test-pyus71xi-check-manifest/repo3' into submodule path '/tmp/test-pyus71xi-check-manifest/repo2/sub3' failed

This probably wasn't seen at the time of the security update probably because DEP8 tests are not run publicly then due to embargo.

It's also affecting the devel release, where git is migrating from 2.37 to 2.38 (2.38 has the security fix).

The DEP8 fix might have to be backported to stable releases as well, or else SRUing git in the future (for non-security updates) will be a pain.

Revision history for this message
Andreas Hasenack (ahasenack) wrote :

Bug about the config change, marked invalid: https://bugs.launchpad.net/ubuntu/+source/git/+bug/1993586

description: updated
Revision history for this message
Andreas Hasenack (ahasenack) wrote :

Going back to the original bug, and using bug tasks there to track the fixed in the packages that need to have their dep8 tests changed.

Changed in git (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.