[AUTO-CHERRYPICK] [AUTOPATCHER-CORE] Upgrade git to 2.39.4 Fix CVE-2024-32002, CVE-2024-32004, CVE-2024-32020, CVE-2024-32021, CVE-2024-32465 - branch main (#9215)

SPECS/git/git.signatures.json

@@ -1,5 +1,5 @@
 {
- "Signatures": {
-  "git-2.33.8.tar.xz": "5de0d2b48e5cf8f5a7d64befb7d825277ce3587cecbcd917e4737babac52b6a3"
- }
-}
+  "Signatures": {
+    "git-2.39.4.tar.xz": "ff2972e002c1bdf9f053243c934a2a1bc8248f8d419aaee8f6d5a4ed205c6633"
+  }
+}

SPECS/git/git.spec

@@ -1,7 +1,7 @@
 Summary:        Fast distributed version control system
 Name:           git
-Version:        2.33.8
-Release:        2%{?dist}
+Version:        2.39.4
+Release:        1%{?dist}
 License:        GPLv2
 Vendor:         Microsoft Corporation
 Distribution:   Mariner
@@ -168,6 +168,9 @@ fi
 %endif
 
 %changelog
+* Tue May 21 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 2.39.4-1
+- Auto-upgrade to 2.39.4 - Fix CVE-2024-32002, CVE-2024-32004, CVE-2024-32020, CVE-2024-32021, CVE-2024-32465
+
 * Wed Sep 20 2023 Jon Slobodzian <joslobo@microsoft.com> - 2.33.8-2
 - Recompile with stack-protection fixed gcc version (CVE-2023-4039)
 

cgmanifest.json

@@ -4280,8 +4280,8 @@
         "type": "other",
         "other": {
           "name": "git",
-          "version": "2.33.8",
-          "downloadUrl": "https://www.kernel.org/pub/software/scm/git/git-2.33.8.tar.xz"
+          "version": "2.39.4",
+          "downloadUrl": "https://www.kernel.org/pub/software/scm/git/git-2.39.4.tar.xz"
         }
       }
     },