From ce244ef11ada37e6fbd74e6e1071ba12da76dd7e Mon Sep 17 00:00:00 2001 From: Michael Mair-Keimberger Date: Sat, 13 Jan 2024 16:06:42 +0100 Subject: [PATCH] app-emulation/xen: use https for git clone git:// is unencrypted and could be used by an attacker (mitm) to insert malicious code, see also [1]. git:// runs on port 9418 which is also less likely open behind a firewall. [1] git-scm.com/book/en/v2/Git-on-the-Server-The-Protocols Signed-off-by: Michael Mair-Keimberger Signed-off-by: Conrad Kostecki --- app-emulation/xen/xen-4.16.6_pre1.ebuild | 4 ++-- app-emulation/xen/xen-4.16.6_pre2.ebuild | 2 +- app-emulation/xen/xen-4.17.3.ebuild | 4 ++-- app-emulation/xen/xen-4.17.3_pre1.ebuild | 4 ++-- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/app-emulation/xen/xen-4.16.6_pre1.ebuild b/app-emulation/xen/xen-4.16.6_pre1.ebuild index c16c9bcc93b36..c6ac7dcf5e2fc 100644 --- a/app-emulation/xen/xen-4.16.6_pre1.ebuild +++ b/app-emulation/xen/xen-4.16.6_pre1.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2023 Gentoo Authors +# Copyright 1999-2024 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 EAPI=8 @@ -9,7 +9,7 @@ inherit flag-o-matic mount-boot python-any-r1 toolchain-funcs if [[ ${PV} == *9999 ]]; then inherit git-r3 - EGIT_REPO_URI="git://xenbits.xen.org/xen.git" + EGIT_REPO_URI="https://xenbits.xen.org/git-http/xen.git" SRC_URI="" else KEYWORDS="amd64 ~arm -x86" diff --git a/app-emulation/xen/xen-4.16.6_pre2.ebuild b/app-emulation/xen/xen-4.16.6_pre2.ebuild index 07f9f660ee7b8..a14afe061bf48 100644 --- a/app-emulation/xen/xen-4.16.6_pre2.ebuild +++ b/app-emulation/xen/xen-4.16.6_pre2.ebuild @@ -9,7 +9,7 @@ inherit flag-o-matic mount-boot python-any-r1 toolchain-funcs if [[ ${PV} == *9999 ]]; then inherit git-r3 - EGIT_REPO_URI="git://xenbits.xen.org/xen.git" + EGIT_REPO_URI="https://xenbits.xen.org/git-http/xen.git" SRC_URI="" else KEYWORDS="amd64 ~arm -x86" diff --git a/app-emulation/xen/xen-4.17.3.ebuild b/app-emulation/xen/xen-4.17.3.ebuild index fa64c06e45548..3152a4b60f44f 100644 --- a/app-emulation/xen/xen-4.17.3.ebuild +++ b/app-emulation/xen/xen-4.17.3.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2023 Gentoo Authors +# Copyright 1999-2024 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 EAPI=8 @@ -9,7 +9,7 @@ inherit flag-o-matic mount-boot python-any-r1 secureboot toolchain-funcs if [[ ${PV} == *9999 ]]; then inherit git-r3 - EGIT_REPO_URI="git://xenbits.xen.org/xen.git" + EGIT_REPO_URI="https://xenbits.xen.org/git-http/xen.git" SRC_URI="" else KEYWORDS="~amd64 ~arm -x86" diff --git a/app-emulation/xen/xen-4.17.3_pre1.ebuild b/app-emulation/xen/xen-4.17.3_pre1.ebuild index 2d80429a137ea..3ba72e1f03c3a 100644 --- a/app-emulation/xen/xen-4.17.3_pre1.ebuild +++ b/app-emulation/xen/xen-4.17.3_pre1.ebuild @@ -1,4 +1,4 @@ -# Copyright 1999-2023 Gentoo Authors +# Copyright 1999-2024 Gentoo Authors # Distributed under the terms of the GNU General Public License v2 EAPI=8 @@ -9,7 +9,7 @@ inherit flag-o-matic mount-boot python-any-r1 secureboot toolchain-funcs if [[ ${PV} == *9999 ]]; then inherit git-r3 - EGIT_REPO_URI="git://xenbits.xen.org/xen.git" + EGIT_REPO_URI="https://xenbits.xen.org/git-http/xen.git" SRC_URI="" else KEYWORDS="~amd64 ~arm -x86"