Format: 1.8 Date: Fri, 14 Oct 2022 11:15:33 -0300 Source: git Binary: git git-man git-doc git-cvs git-svn git-mediawiki git-email git-daemon-run git-daemon-sysvinit git-gui gitk git-el gitweb git-all Architecture: s390x s390x_translations Version: 1:2.17.1-1ubuntu0.13 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas Da Silva Barbosa Description: git - fast, scalable, distributed revision control system git-all - fast, scalable, distributed revision control system (all subpacka git-cvs - fast, scalable, distributed revision control system (cvs interope git-daemon-run - fast, scalable, distributed revision control system (git-daemon s git-daemon-sysvinit - fast, scalable, distributed revision control system (git-daemon s git-doc - fast, scalable, distributed revision control system (documentatio git-el - fast, scalable, distributed revision control system (emacs suppor git-email - fast, scalable, distributed revision control system (email add-on git-gui - fast, scalable, distributed revision control system (GUI) git-man - fast, scalable, distributed revision control system (manual pages git-mediawiki - fast, scalable, distributed revision control system (MediaWiki re git-svn - fast, scalable, distributed revision control system (svn interope gitk - fast, scalable, distributed revision control system (revision tre gitweb - fast, scalable, distributed revision control system (web interfac Changes: git (1:2.17.1-1ubuntu0.13) bionic-security; urgency=medium . * SECURITY UPDATE: Unexpected behavior - debian/patches/CVE-2022-39253-*.patch: disallow --local clones with symlinks and additionally changed the protocol.file.allow to be user by default in builtin/clone.c, transport.c, and modified tests in t/t5604-clone-reference.sh, lib-submodule-update.sh, t/t1091-sparse-checkout-builtin.sh, t/t1500-rev-parse.sh, t/t2400-worktree-add.sh, t/t2403-worktree-move.sh, t/t2405-worktree-submodule.sh, t/t3200-branch.sh, t/t3420-rebase-autostash.sh, t/t3426-rebase-submodule.sh, t/t3512-cherry-pick-submodule.sh, t/t3600-rm.sh, t/t3906-stash-submodule.sh, t/t4059-diff-submodule-not-initialized.sh, t/t4060-diff-submodule-option-diff-format.sh, t/t4067-diff-partial-clone.sh, t/t4208-log-magic-pathspec.sh, t/t5510-fetch.sh, t/t5526-fetch-submodules.sh, t/t5545-push-options.sh, t/t5572-pull-submodule.sh, t/t5601-clone.sh, t/t5614-clone-submodules-shallow.sh, t/t5616-partial-clone.sh, t/t5617-clone-submodules-remote.sh, t/t6008-rev-list-submodule.sh, t/t6134-pathspec-in-submodule.sh, t/t7001-mv.sh, t/t7064-wtstatus-pv2.sh, t/t7300-clean.sh, t/t7400-submodule-basic.sh, t/t7403-submodule-sync.sh, t/t7406-submodule-update.sh, t/t7407-submodule-foreach.sh, t/t7408-submodule-reference.sh, t/t7409-submodule-detached-work-tree.sh, t/t7411-submodule-config.sh, t/t7413-submodule-is-active.sh, t/t7414-submodule-mistakes.sh, t/t7415-submodule-names.sh, t/t7416-submodule-dash-url.sh, t/t7417-submodule-path-url.sh, t/t7418-submodule-sparse-gitmodules.sh, t/t7419-submodule-set-branch.sh, t/t7420-submodule-set-url.sh, t/t7421-submodule-summary-add.sh, t/t7506-status-submodule.sh, t/t7507-commit-verbose.sh, t/t7800-difftool.sh, t/t7814-grep-recurse-submodules.sh, t/t9304-fast-import-marks.sh, t/t9350-fast-export.sh, t/t1092-sparse-checkout-compatibility.sh, t/t2080-parallel-checkout-basics.sh, t/t7450-bad-git-dotfiles.sh. - CVE-2022-39253 * SECURITY UPDATE: Arbitrary heap writes - debian/patches/CVE-2022-39260-*.patch: limit size of interactive commands and reject too-long cmdline strings in split cmdline() in shell.c, t/t9850-shell.sh, alias.c. - CVE-2022-39260 Checksums-Sha1: 3e9aa5aa99e5f30f406c27dfe2f37668d3754fb1 38825556 git-dbgsym_2.17.1-1ubuntu0.13_s390x.ddeb d39df660638a97bc482fb966aa036bbdf43234b3 9003 git_2.17.1-1ubuntu0.13_s390x.buildinfo 6d06d718349e779a0dbd92d64fd7aac00327b98e 3584872 git_2.17.1-1ubuntu0.13_s390x.deb 3832c6105592ee698e3c566d1fe8b15df1600c38 3381017 git_2.17.1-1ubuntu0.13_s390x_translations.tar.gz Checksums-Sha256: e50f8d26a8854a231db51f7c2a116115cc43277ef69564f7ce82dcfa2201a103 38825556 git-dbgsym_2.17.1-1ubuntu0.13_s390x.ddeb 6cc78a0d91877cd1031816c15084d54c18a53e063ebcfaeaec7efeea64204c6a 9003 git_2.17.1-1ubuntu0.13_s390x.buildinfo cf0092838bdf5fffb4e8d4bc3fb21b285e900c621017b1f8a01a8a7ce9c28e42 3584872 git_2.17.1-1ubuntu0.13_s390x.deb dfa7efb756cc716b4e43214d226798e38513c17549fe50c9e7bbfa03c66ca3f6 3381017 git_2.17.1-1ubuntu0.13_s390x_translations.tar.gz Files: ca7f780276119c718b77ef8ff0c5dfbf 38825556 debug optional git-dbgsym_2.17.1-1ubuntu0.13_s390x.ddeb 94f75174f278db4b386f1b2e15922792 9003 vcs optional git_2.17.1-1ubuntu0.13_s390x.buildinfo f802cbcf83162d1548c04fdd11ce089f 3584872 vcs optional git_2.17.1-1ubuntu0.13_s390x.deb 27a24272bbebb3fcc837771ef8116ea1 3381017 raw-translations - git_2.17.1-1ubuntu0.13_s390x_translations.tar.gz Original-Maintainer: Gerrit Pape