Format: 1.8 Date: Wed, 26 Apr 2023 11:14:45 -0300 Source: git Binary: git git-man git-doc git-cvs git-svn git-mediawiki git-email git-daemon-run git-daemon-sysvinit git-gui gitk git-el gitweb git-all Architecture: all amd64 amd64_translations Version: 1:2.17.1-1ubuntu0.18 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas Da Silva Barbosa Description: git - fast, scalable, distributed revision control system git-all - fast, scalable, distributed revision control system (all subpacka git-cvs - fast, scalable, distributed revision control system (cvs interope git-daemon-run - fast, scalable, distributed revision control system (git-daemon s git-daemon-sysvinit - fast, scalable, distributed revision control system (git-daemon s git-doc - fast, scalable, distributed revision control system (documentatio git-el - fast, scalable, distributed revision control system (emacs suppor git-email - fast, scalable, distributed revision control system (email add-on git-gui - fast, scalable, distributed revision control system (GUI) git-man - fast, scalable, distributed revision control system (manual pages git-mediawiki - fast, scalable, distributed revision control system (MediaWiki re git-svn - fast, scalable, distributed revision control system (svn interope gitk - fast, scalable, distributed revision control system (revision tre gitweb - fast, scalable, distributed revision control system (web interfac Changes: git (1:2.17.1-1ubuntu0.18) bionic-security; urgency=medium . * SECURITY UPDATE: Overwriting path - debian/patches/CVE-2023_25652_25815_29007/0022-*.patch: apply --reject overwriting existing .rej symlink if it exists in apply.c, t/t4115-apply-symlink.sh. - CVE-2023-25652 * SECURITY UPDATE: Malicious placement of crafted messages - debian/patches/CVE-2023_25652_25815_29007/0024-*patch: avoid using gettext if the locale dir is not present in gettext.c. - CVE-2023-25815 * SECURITY UPDATE: Arbitrary configuration injection - debian/patches/CVE-2023_25652_25815_29007/0025-*.patch: avoid fixed-sized buffer when renaming/deleting a section in config.c. - debian/patches/CVE-2023_25652_25815_29007/0026-*.patch: avoid integer truncation in copy_or_rename_section_in_file() in config.c. - debian/patches/CVE-2023_25652_25815_29007/0027-*.patch: disallow overly-long lines in copy_or_rename_section_in_file in config.c. - CVE-2023-29007 Checksums-Sha1: f08297818bdf433857233a56ff4993e6ead7e6eb 6616 git-all_2.17.1-1ubuntu0.18_all.deb 4539d0634e93bdd537e0f29ad8a943b6f25bf2db 69620 git-cvs_2.17.1-1ubuntu0.18_all.deb b7a266f85b2efb7da14035d7b578b17219db7f1d 8100 git-daemon-run_2.17.1-1ubuntu0.18_all.deb 4bc0cb1576906efba0dc4ea37c67452ef132c64b 9208 git-daemon-sysvinit_2.17.1-1ubuntu0.18_all.deb 58ec5b9a0ac8caee447d0a29aec3d1eaeb1525d5 37758236 git-dbgsym_2.17.1-1ubuntu0.18_amd64.ddeb fb9aa20b0eba920f5c8f818242be6aa48b9b6806 922876 git-doc_2.17.1-1ubuntu0.18_all.deb 8921e9c02bffed45ac6a40ed6157c2a1d5b756dd 25968 git-el_2.17.1-1ubuntu0.18_all.deb 689d2e4f009d3e6281053df775863fd26d8a8b2b 30632 git-email_2.17.1-1ubuntu0.18_all.deb e3af71959b064b6ad4305f7152f7eb38ea972e46 215176 git-gui_2.17.1-1ubuntu0.18_all.deb ddbe8a0e373728f1c6f47870eef8fd3f167d699c 804428 git-man_2.17.1-1ubuntu0.18_all.deb 1e02e53ff2de729bdccf66379a559f95a13f7c63 22340 git-mediawiki_2.17.1-1ubuntu0.18_all.deb 8f3edaae2bf6b816d10f7f37b451009c4f38462b 80896 git-svn_2.17.1-1ubuntu0.18_all.deb 6871fd190c5cf35fd1081964c498368b27a7d3e2 13098 git_2.17.1-1ubuntu0.18_amd64.buildinfo 00d129454d4619f37c5533eda29d990267fc060d 3989588 git_2.17.1-1ubuntu0.18_amd64.deb 475a4243040c6be4ee7ad57887920a54ee609d3c 3377400 git_2.17.1-1ubuntu0.18_amd64_translations.tar.gz c9100593779a5bee156ca8b26fd83368e02e5331 136640 gitk_2.17.1-1ubuntu0.18_all.deb 84a11c95cb813aa39e704ef43e18cc035d28f71e 10660 gitweb_2.17.1-1ubuntu0.18_all.deb Checksums-Sha256: 47142cd5c576dddd4f31705b022b61b527dafae8cc6863d1cadf12ae113a1a83 6616 git-all_2.17.1-1ubuntu0.18_all.deb 5848e50dbe4e7d40bba3763b99df761a172d36957da2ef3c57b3c1516e6b0be3 69620 git-cvs_2.17.1-1ubuntu0.18_all.deb 9c660f54ebf5168fda705e18a4a01cff9fb46c9dac79c200833c571f3687e8ca 8100 git-daemon-run_2.17.1-1ubuntu0.18_all.deb 19bf0b6990c68c61f14aa29add281d818c736c41d8d1a0ce891958bab051831f 9208 git-daemon-sysvinit_2.17.1-1ubuntu0.18_all.deb 66615191e6a72bb50611e1f03c94fbab2c5863812bbebdf3ab28308903a77b92 37758236 git-dbgsym_2.17.1-1ubuntu0.18_amd64.ddeb fccbffa89ad5b401f72574dc174bfc80a19555238f9e707abf8621517d1083d7 922876 git-doc_2.17.1-1ubuntu0.18_all.deb 7b43aa32de5bda377fecf0f60704c640644454e8e63b77ef267ad6038664db1f 25968 git-el_2.17.1-1ubuntu0.18_all.deb ba0f60260777712f55e5270708473c2980fd6e8e0546a1d8a1c4783a4a5d12b8 30632 git-email_2.17.1-1ubuntu0.18_all.deb adea921579ea1cc2ace0904dd4fdb42a978139c3c8a475e72d9137c41d9c4c46 215176 git-gui_2.17.1-1ubuntu0.18_all.deb 0f7824ae6cc655ac264086a1dc24fc08110532a84c7e2834c28b3371e1f6a762 804428 git-man_2.17.1-1ubuntu0.18_all.deb 370398cdfaa601e6284babe6648c18a926b4392b848e540ce086c56a33034759 22340 git-mediawiki_2.17.1-1ubuntu0.18_all.deb 1190cd7c6c334ec3cf6df277301fe2dd7d43d7ad38e31987291daad88f6ab969 80896 git-svn_2.17.1-1ubuntu0.18_all.deb e0cfa5732fa313534e9d203379013653720fd637a05607b1d46b1160d0a8cee3 13098 git_2.17.1-1ubuntu0.18_amd64.buildinfo fb43bb837d2f770038d4e582846e60fd3eaf78b53b4fa32e5433162cef9c8580 3989588 git_2.17.1-1ubuntu0.18_amd64.deb 739d99795de8d8983720f4d0b310e62f9571b1bb6b28ebd4354bbb365754546e 3377400 git_2.17.1-1ubuntu0.18_amd64_translations.tar.gz 1bc3a3990b8140322726759b75c45dbe440392c7fc98e0f07fe358ad2e65a031 136640 gitk_2.17.1-1ubuntu0.18_all.deb 018c77a46d8aacf7b0d04a9c2222ae51311e15c88f3c7c868d43f066803431fa 10660 gitweb_2.17.1-1ubuntu0.18_all.deb Files: 6fa00fd221c056d29d831e94e7d0ded3 6616 vcs optional git-all_2.17.1-1ubuntu0.18_all.deb 2f32b79626e86d65bc85bccf5325c642 69620 vcs optional git-cvs_2.17.1-1ubuntu0.18_all.deb 0e7585aef8c87918973795e8a4b6dd7f 8100 vcs optional git-daemon-run_2.17.1-1ubuntu0.18_all.deb d21a0ad9b2da1ba165084ce69797f09f 9208 vcs optional git-daemon-sysvinit_2.17.1-1ubuntu0.18_all.deb d79fb58d56fafe5e8fe17e4cc9c00054 37758236 debug optional git-dbgsym_2.17.1-1ubuntu0.18_amd64.ddeb 7e49f2a197912d74ad9979f457d6912f 922876 doc optional git-doc_2.17.1-1ubuntu0.18_all.deb 96a3af20682dca36bb949bac31ac7996 25968 vcs optional git-el_2.17.1-1ubuntu0.18_all.deb 785e952a2a7d2db9d5ff7acc2ce6c1c0 30632 vcs optional git-email_2.17.1-1ubuntu0.18_all.deb 7e728b79ba5b53629c729928a833eb38 215176 vcs optional git-gui_2.17.1-1ubuntu0.18_all.deb 3fbc967ecde26c3ac5d031aeedd21afb 804428 doc optional git-man_2.17.1-1ubuntu0.18_all.deb 63db6d13f6cbcf27c9068c1cdfff679f 22340 vcs optional git-mediawiki_2.17.1-1ubuntu0.18_all.deb 2d9a423826e7af489382534f518374ca 80896 vcs optional git-svn_2.17.1-1ubuntu0.18_all.deb 8860359ecd62a0649f5df49f4b8899f3 13098 vcs optional git_2.17.1-1ubuntu0.18_amd64.buildinfo 57294452c2990b7ecb18ad2784216cb4 3989588 vcs optional git_2.17.1-1ubuntu0.18_amd64.deb e79ca6f41ea6362d6a7f547be3a4b317 3377400 raw-translations - git_2.17.1-1ubuntu0.18_amd64_translations.tar.gz 579dc6b26ad215dc434b47024ef7061b 136640 vcs optional gitk_2.17.1-1ubuntu0.18_all.deb 38b692e59ab46c1e02d527538482255e 10660 vcs optional gitweb_2.17.1-1ubuntu0.18_all.deb Original-Maintainer: Gerrit Pape