-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 11 Jan 2025 20:46:03 +0100
Source: git
Architecture: source
Version: 1:2.39.5-0+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: Jonathan Nieder <jrnie...@gmail.com>
Changed-By: Salvatore Bonaccorso <car...@debian.org>
Changes:
git (1:2.39.5-0+deb12u2) bookworm-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* credential_format(): also encode <host>[:<port>]
* credential: sanitize the user prompt (CVE-2024-50349)
* credential: disallow Carriage Returns in the protocol by default
(CVE-2024-52006)
Checksums-Sha1:
13dff3233fa3d9df37978ccb4a84417ada801899 2982 git_2.39.5-0+deb12u2.dsc
e0639a224699de6233eed4b6f7299ea2046c1a2c 747556
git_2.39.5-0+deb12u2.debian.tar.xz
308f7d1f51d87e1e734f1d079bee6db17eca1f5f 8841
git_2.39.5-0+deb12u2_source.buildinfo
Checksums-Sha256:
52c384a95da514d17749447d581bb3876a398c8632f2bde139bdb6627711f58f 2982
git_2.39.5-0+deb12u2.dsc
5a6b6e48c7f19df294d2a8c030c219688d1823326d209ad15a06be3743d9cd2b 747556
git_2.39.5-0+deb12u2.debian.tar.xz
e2168c3147520c48893f4064fd520213f374e3fc6f75d8301c30e9bfdfdb7895 8841
git_2.39.5-0+deb12u2_source.buildinfo
Files:
3704c5f01cc5d62ed678c10c5c20cc1f 2982 vcs optional git_2.39.5-0+deb12u2.dsc
0ec71b9bc71e9beec643766fe9df7303 747556 vcs optional
git_2.39.5-0+deb12u2.debian.tar.xz
a8e351641c5181d0d83fbe5dae5ef0f3 8841 vcs optional
git_2.39.5-0+deb12u2_source.buildinfo
-----BEGIN PGP SIGNATURE-----iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmeCzlFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EPbMP/2PFYPr0SUdBG3XoBXdiN85vDB36nNlh FMkqfu7gqIihCIrSTFhrjYtWht0fiMpz0W37hlqqhQPjGdOhbr9ixEyzM9YT6izT hhB2Lk/G7ECzznb1oyqeE4NM6uJGa8kyBaAP8nmfX66djUfxW2ukc2X+UwCqiagD 2pBguFkDTCh7CW1UjZ4TFpaKJb+PhxRO7Vbr5tbjq0Ug5lWwA3rRKy9X+I5Ct3X4 yQ9XC7dQBu/gsXwDu0GvJCCd72srsWa4RyRjkm/B+n1VMdxtVSwuFHIohf6ZLvq5 fb67H61MEVeqf0e8oSXqNlih4a4kIHcEGVAQZqdXiPc/We5m9LlbctWYimziP9t/ HSS0p40rKpWs6OmZ9zBimmOdfy13HhrYb77LwSLM4kdkCpsMYhZgvqT+sHC4KS3F AvjcFwV6QF3hzhFpvnbzmXbcQfSUGdgccaIOevmcYd3DWb/MFD/CvvSKp4n1weKd mLak4hNjfleGWEoSTKPUfj+Ubxvi+ik3Onk3ShyEZEGGLJnohjbDffs+gf2oMjXB g68IhfF4Qk0WCkok+36Ec22xh9aZuUe4n3/Rk9F+RgxjpHkYXNnscvRtYrX5xwpX /X1Nas5/Z367rYNziqdTb39Hrhz4dTx+FtAGiNXoXOtKWx1e/24jRexmWRPpraKR mpTX42Qds5U4 =ndjZ -----END PGP SIGNATURE-----
pgp8e7oBPUR6d.pgp
Description: PGP signature
