-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Jan 2025 20:46:03 +0100 Source: git Architecture: source Version: 1:2.39.5-0+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: Jonathan Nieder Changed-By: Salvatore Bonaccorso Changes: git (1:2.39.5-0+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * credential_format(): also encode [:] * credential: sanitize the user prompt (CVE-2024-50349) * credential: disallow Carriage Returns in the protocol by default (CVE-2024-52006) Checksums-Sha1: 13dff3233fa3d9df37978ccb4a84417ada801899 2982 git_2.39.5-0+deb12u2.dsc e0639a224699de6233eed4b6f7299ea2046c1a2c 747556 git_2.39.5-0+deb12u2.debian.tar.xz 308f7d1f51d87e1e734f1d079bee6db17eca1f5f 8841 git_2.39.5-0+deb12u2_source.buildinfo Checksums-Sha256: 52c384a95da514d17749447d581bb3876a398c8632f2bde139bdb6627711f58f 2982 git_2.39.5-0+deb12u2.dsc 5a6b6e48c7f19df294d2a8c030c219688d1823326d209ad15a06be3743d9cd2b 747556 git_2.39.5-0+deb12u2.debian.tar.xz e2168c3147520c48893f4064fd520213f374e3fc6f75d8301c30e9bfdfdb7895 8841 git_2.39.5-0+deb12u2_source.buildinfo Files: 3704c5f01cc5d62ed678c10c5c20cc1f 2982 vcs optional git_2.39.5-0+deb12u2.dsc 0ec71b9bc71e9beec643766fe9df7303 747556 vcs optional git_2.39.5-0+deb12u2.debian.tar.xz a8e351641c5181d0d83fbe5dae5ef0f3 8841 vcs optional git_2.39.5-0+deb12u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmeCzlFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EPbMP/2PFYPr0SUdBG3XoBXdiN85vDB36nNlh FMkqfu7gqIihCIrSTFhrjYtWht0fiMpz0W37hlqqhQPjGdOhbr9ixEyzM9YT6izT hhB2Lk/G7ECzznb1oyqeE4NM6uJGa8kyBaAP8nmfX66djUfxW2ukc2X+UwCqiagD 2pBguFkDTCh7CW1UjZ4TFpaKJb+PhxRO7Vbr5tbjq0Ug5lWwA3rRKy9X+I5Ct3X4 yQ9XC7dQBu/gsXwDu0GvJCCd72srsWa4RyRjkm/B+n1VMdxtVSwuFHIohf6ZLvq5 fb67H61MEVeqf0e8oSXqNlih4a4kIHcEGVAQZqdXiPc/We5m9LlbctWYimziP9t/ HSS0p40rKpWs6OmZ9zBimmOdfy13HhrYb77LwSLM4kdkCpsMYhZgvqT+sHC4KS3F AvjcFwV6QF3hzhFpvnbzmXbcQfSUGdgccaIOevmcYd3DWb/MFD/CvvSKp4n1weKd mLak4hNjfleGWEoSTKPUfj+Ubxvi+ik3Onk3ShyEZEGGLJnohjbDffs+gf2oMjXB g68IhfF4Qk0WCkok+36Ec22xh9aZuUe4n3/Rk9F+RgxjpHkYXNnscvRtYrX5xwpX /X1Nas5/Z367rYNziqdTb39Hrhz4dTx+FtAGiNXoXOtKWx1e/24jRexmWRPpraKR mpTX42Qds5U4 =ndjZ -----END PGP SIGNATURE-----