Format: 1.8
Date: Fri, 14 Oct 2022 11:15:33 -0300
Source: git
Binary: git git-man git-doc git-cvs git-svn git-mediawiki git-email git-daemon-run git-daemon-sysvinit git-gui gitk git-el gitweb git-all
Architecture: i386 i386_translations
Version: 1:2.17.1-1ubuntu0.13
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy02-amd64-119.buildd>
Changed-By: Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>
Description:
 git        - fast, scalable, distributed revision control system
 git-all    - fast, scalable, distributed revision control system (all subpacka
 git-cvs    - fast, scalable, distributed revision control system (cvs interope
 git-daemon-run - fast, scalable, distributed revision control system (git-daemon s
 git-daemon-sysvinit - fast, scalable, distributed revision control system (git-daemon s
 git-doc    - fast, scalable, distributed revision control system (documentatio
 git-el     - fast, scalable, distributed revision control system (emacs suppor
 git-email  - fast, scalable, distributed revision control system (email add-on
 git-gui    - fast, scalable, distributed revision control system (GUI)
 git-man    - fast, scalable, distributed revision control system (manual pages
 git-mediawiki - fast, scalable, distributed revision control system (MediaWiki re
 git-svn    - fast, scalable, distributed revision control system (svn interope
 gitk       - fast, scalable, distributed revision control system (revision tre
 gitweb     - fast, scalable, distributed revision control system (web interfac
Changes:
 git (1:2.17.1-1ubuntu0.13) bionic-security; urgency=medium
 .
   * SECURITY UPDATE: Unexpected behavior
     - debian/patches/CVE-2022-39253-*.patch: disallow --local
       clones with symlinks and additionally changed the
       protocol.file.allow to be user by default in
       builtin/clone.c, transport.c, and modified tests in
       t/t5604-clone-reference.sh,
       lib-submodule-update.sh, t/t1091-sparse-checkout-builtin.sh,
       t/t1500-rev-parse.sh, t/t2400-worktree-add.sh,
       t/t2403-worktree-move.sh, t/t2405-worktree-submodule.sh,
       t/t3200-branch.sh, t/t3420-rebase-autostash.sh,
       t/t3426-rebase-submodule.sh, t/t3512-cherry-pick-submodule.sh,
       t/t3600-rm.sh, t/t3906-stash-submodule.sh,
       t/t4059-diff-submodule-not-initialized.sh,
       t/t4060-diff-submodule-option-diff-format.sh,
       t/t4067-diff-partial-clone.sh,
       t/t4208-log-magic-pathspec.sh, t/t5510-fetch.sh,
       t/t5526-fetch-submodules.sh, t/t5545-push-options.sh,
       t/t5572-pull-submodule.sh, t/t5601-clone.sh,
       t/t5614-clone-submodules-shallow.sh, t/t5616-partial-clone.sh,
       t/t5617-clone-submodules-remote.sh, t/t6008-rev-list-submodule.sh,
       t/t6134-pathspec-in-submodule.sh,
       t/t7001-mv.sh, t/t7064-wtstatus-pv2.sh,
       t/t7300-clean.sh, t/t7400-submodule-basic.sh,
       t/t7403-submodule-sync.sh, t/t7406-submodule-update.sh,
       t/t7407-submodule-foreach.sh, t/t7408-submodule-reference.sh,
       t/t7409-submodule-detached-work-tree.sh, t/t7411-submodule-config.sh,
       t/t7413-submodule-is-active.sh, t/t7414-submodule-mistakes.sh,
       t/t7415-submodule-names.sh, t/t7416-submodule-dash-url.sh,
       t/t7417-submodule-path-url.sh, t/t7418-submodule-sparse-gitmodules.sh,
       t/t7419-submodule-set-branch.sh, t/t7420-submodule-set-url.sh,
       t/t7421-submodule-summary-add.sh, t/t7506-status-submodule.sh,
       t/t7507-commit-verbose.sh, t/t7800-difftool.sh,
       t/t7814-grep-recurse-submodules.sh, t/t9304-fast-import-marks.sh,
       t/t9350-fast-export.sh, t/t1092-sparse-checkout-compatibility.sh,
       t/t2080-parallel-checkout-basics.sh, t/t7450-bad-git-dotfiles.sh.
     - CVE-2022-39253
   * SECURITY UPDATE: Arbitrary heap writes
     - debian/patches/CVE-2022-39260-*.patch: limit size of interactive
       commands and reject too-long cmdline strings in split cmdline()
       in shell.c, t/t9850-shell.sh, alias.c.
     - CVE-2022-39260
Checksums-Sha1:
 a0b7d3a1622db64ac2ef80e9a50c938262062c7f 33787912 git-dbgsym_2.17.1-1ubuntu0.13_i386.ddeb
 29c0a2eb9fd20c19257c2689e76529767e8936ea 9105 git_2.17.1-1ubuntu0.13_i386.buildinfo
 1ae230c9623ddf5e89c79d1d54ed316fd2846d4c 4251140 git_2.17.1-1ubuntu0.13_i386.deb
 5006b18e23f4e350585e959b919feee79bfcf05a 3379820 git_2.17.1-1ubuntu0.13_i386_translations.tar.gz
Checksums-Sha256:
 e92bbf20c9d1d7c7d3fbb4a0cabf69286384e8f9a1f49dae149047af54a9d057 33787912 git-dbgsym_2.17.1-1ubuntu0.13_i386.ddeb
 ad436fab2acfc0990e696dfa732820ff618c072755099dcdcdf2d3463174afe5 9105 git_2.17.1-1ubuntu0.13_i386.buildinfo
 f2b0ed1c99e2fbdbb4b465af73542b2c80f56b84ffc7826134eb925276f50ad6 4251140 git_2.17.1-1ubuntu0.13_i386.deb
 dd58b5b3cc33e3c8df784a7ed5b50c637818382c23feba0f1338700dd97aefb4 3379820 git_2.17.1-1ubuntu0.13_i386_translations.tar.gz
Files:
 6a661473bce29e57eac1fc673b6075b9 33787912 debug optional git-dbgsym_2.17.1-1ubuntu0.13_i386.ddeb
 b8b2a240f97d43a4e6f623585680cc81 9105 vcs optional git_2.17.1-1ubuntu0.13_i386.buildinfo
 b75aa1c5c5af7a24baa7232860fbf694 4251140 vcs optional git_2.17.1-1ubuntu0.13_i386.deb
 c556c3719db6ec1b71ba5e678e744047 3379820 raw-translations - git_2.17.1-1ubuntu0.13_i386_translations.tar.gz
Original-Maintainer: Gerrit Pape <pape@smarden.org>