Publishing details

Removed from disk on 2021-03-11.
Removal requested on 2021-03-10.
Superseded on 2021-03-09 by git - 1:2.7.4-0ubuntu1.10
Published on 2020-04-21
Copied from ubuntu xenial in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

git (1:2.7.4-0ubuntu1.9) xenial-security; urgency=medium

  * SECURITY UPDATE: credential helper issue with missing host or scheme
    - debian/patches/CVE-2020-11008-1.patch: make "quit" helper more
      realistic in t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-2.patch: use more realistic inputs in
      t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-3.patch: parse URL without host as
      empty host, not unset in credential.c, http.c,
      t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-4.patch: refuse to operate when missing
      host or protocol in credential.c, t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-5.patch: convert gitmodules url to URL
      passed to curl in fsck.c, t/t7416-submodule-dash-url.sh.
    - debian/patches/CVE-2020-11008-6.patch: die() when parsing invalid
      urls in credential.c, t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-7.patch: treat URL without scheme as
      invalid in credential.c, fsck.c, t/t7416-submodule-dash-url.sh.
    - debian/patches/CVE-2020-11008-8.patch: treat URL with empty scheme as
      invalid in credential.c, t/t5550-http-fetch-dumb.sh,
      t/t7416-submodule-dash-url.sh.
    - debian/patches/CVE-2020-11008-9.patch: reject URL with empty host in
      .gitmodules in fsck.c, t/t7416-submodule-dash-url.sh.
    - CVE-2020-11008

 -- Marc Deslauriers <email address hidden>  Mon, 20 Apr 2020 12:24:43 -0400

Available diffs

diff from 1:2.7.4-0ubuntu1.8 (in ~ubuntu-security/ubuntu/ppa) to 1:2.7.4-0ubuntu1.9 (11.3 KiB)
diff from 1:2.7.4-0ubuntu1.6 to 1:2.7.4-0ubuntu1.9 (48.4 KiB)

Builds

Package files

git-all_2.7.4-0ubuntu1.9_all.deb (6.2 KiB)
git-arch_2.7.4-0ubuntu1.9_all.deb (19.1 KiB)
git-core_2.7.4-0ubuntu1.9_all.deb (1.4 KiB)
git-cvs_2.7.4-0ubuntu1.9_all.deb (67.8 KiB)
git-daemon-run_2.7.4-0ubuntu1.9_all.deb (7.7 KiB)
git-daemon-sysvinit_2.7.4-0ubuntu1.9_all.deb (8.7 KiB)
git-doc_2.7.4-0ubuntu1.9_all.deb (852.9 KiB)
git-el_2.7.4-0ubuntu1.9_all.deb (25.2 KiB)
git-email_2.7.4-0ubuntu1.9_all.deb (27.5 KiB)
git-gui_2.7.4-0ubuntu1.9_all.deb (202.3 KiB)
git-man_2.7.4-0ubuntu1.9_all.deb (719.2 KiB)
git-mediawiki_2.7.4-0ubuntu1.9_all.deb (21.2 KiB)
git-svn_2.7.4-0ubuntu1.9_all.deb (88.6 KiB)
git_2.7.4-0ubuntu1.9.debian.tar.xz (558.6 KiB)
git_2.7.4-0ubuntu1.9.dsc (2.8 KiB)
git_2.7.4-0ubuntu1.9_amd64.deb (3.0 MiB)
git_2.7.4-0ubuntu1.9_arm64.deb (2.1 MiB)
git_2.7.4-0ubuntu1.9_armhf.deb (2.1 MiB)
git_2.7.4-0ubuntu1.9_i386.deb (3.2 MiB)
git_2.7.4-0ubuntu1.9_powerpc.deb (2.3 MiB)
git_2.7.4-0ubuntu1.9_ppc64el.deb (3.2 MiB)
git_2.7.4-0ubuntu1.9_s390x.deb (2.9 MiB)
git_2.7.4.orig.tar.xz (3.7 MiB)
gitk_2.7.4-0ubuntu1.9_all.deb (128.8 KiB)
gitweb_2.7.4-0ubuntu1.9_all.deb (10.4 KiB)