-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Jan 2025 20:46:03 +0100 Source: git Binary: git git-dbgsym Architecture: amd64 Version: 1:2.39.5-0+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Salvatore Bonaccorso Description: git - fast, scalable, distributed revision control system Changes: git (1:2.39.5-0+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * credential_format(): also encode [:] * credential: sanitize the user prompt (CVE-2024-50349) * credential: disallow Carriage Returns in the protocol by default (CVE-2024-52006) Checksums-Sha1: df10878d88dab4f0086fc5b066e74a07a5943541 44303456 git-dbgsym_2.39.5-0+deb12u2_amd64.deb 82eabaa9850b7a1c470a365bf629777b75f32c76 8603 git_2.39.5-0+deb12u2_amd64-buildd.buildinfo 3e3c0521b639de7b3c119284a241eb0dda0edefc 7259684 git_2.39.5-0+deb12u2_amd64.deb Checksums-Sha256: f9729a579639c1fa8141fd176bdb5b4f60e0dc9e794874f5fcc5905598a45991 44303456 git-dbgsym_2.39.5-0+deb12u2_amd64.deb ba1e974fe2dd1e98e3d58943b45b37ac685105c2097d19b71de9ea28dd965cff 8603 git_2.39.5-0+deb12u2_amd64-buildd.buildinfo 5446b1f6c6f9f058e7b22413b650a45b527c979eb2276d33f46570265ee5eb35 7259684 git_2.39.5-0+deb12u2_amd64.deb Files: 3854284b01c9268634366ae6208bee42 44303456 debug optional git-dbgsym_2.39.5-0+deb12u2_amd64.deb b117978c40f56caa25565009cd1de722 8603 vcs optional git_2.39.5-0+deb12u2_amd64-buildd.buildinfo 42d6f138c089266cc747d94e47420989 7259684 vcs optional git_2.39.5-0+deb12u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgdRoRGwEM09wlaMzOni7ZmUpKEcFAmeEJJIACgkQOni7ZmUp KEfxHQ//aqm+ohgG9sgz7wPSWNpJRmXMdVLTjq5Jnabd9ovIVpp/ucN4a4SKlHOx OSpIRmS8bZDK8TbiuiVnOl0OiWgFhf8flhJonsAxmyBomHCRTkFuaTCsM5m4JSXI vJVK77dUYMydG+qxYe+RKm1F+KRmuQVtwODVVao0dU7isryzC/ZNbMjioMSzplFt XA4RmQXaXLPW7iFCX1apDBpfbRNJAC4wdwZ16uW8sppQPGltbvhJl1ZJS1WAdn2H H0gpqzcgHCqZI4iGuVf9x68U5nuPBkui97+I9ftYoTKzR4EueiZwJNajq+LM0H5Q QQ3ltfxON6ZHM/R4/jx6F+kvqmmuAl8mso5gVT3ipTnIlR34pYsE6BMgUIu7r8mR uzbuq0+v8u57dL1UWkgixnClJXIkiUvJtra58jKmqEEu/70YGCtT0tRxnHkg12Qz 8OAjkeVeecbBP4l9kPyr0Zk6KvILYZDDOpEqvXEC5t1bVjd5fIIO2ZPufdtty5qZ qpUOjYxkoup4Wh4B0dtaDIGYNoF7b+zonfu3cnyxqUp4W/lJslr8uSQU/0f/U202 H1yinV/qn3pdvSKGy+tXaTm/WrhbhzHc+2BQ+VVn3CitSeX8VtZZahs8AtlY1t7b GYHocv3PTqIgEsGztft/bQluX+xlfJ+lIYUMtRDvb3L0GkCk33Y= =r19I -----END PGP SIGNATURE-----