-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 20 Jan 2025 18:29:51 +0100
Source: git-lfs
Architecture: source
Version: 2.13.2-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Andrej Shadura <andrewsh@debian.org>
Changes:
git-lfs (2.13.2-1+deb11u1) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Apply upstream patch to fix CVE-2024-53263:
- Reject LF bytes in credential data
Checksums-Sha1:
bc401a7b091b9a196f535e386ebd4f8e5ff24611 2157 git-lfs_2.13.2-1+deb11u1.dsc
a48f3f53fa699ff98f616a7865b6af53afd5c705 461364 git-lfs_2.13.2.orig.tar.xz
ec8d4fbcae8ad5b45866f63ead21eb0aba6437d3 8080 git-lfs_2.13.2-1+deb11u1.debian.tar.xz
452f4020109b880b398ed9f8825980de376014c5 9580 git-lfs_2.13.2-1+deb11u1_source.buildinfo
Checksums-Sha256:
8233a8b88ec27840cf43715966ae3b65cad0c52d8d79cd1a3cc6fb7dd8ce8bad 2157 git-lfs_2.13.2-1+deb11u1.dsc
6c719179780dc4a06b0ae7dc412a91263ec958bc32d0292e1e5138a4a1563d89 461364 git-lfs_2.13.2.orig.tar.xz
b88ae761e3182a8f0ab8ad6b0e20c36041278e2f390d58d736acd9f10c009d40 8080 git-lfs_2.13.2-1+deb11u1.debian.tar.xz
c1f4cfdd8d0f5fb2ba2f1693c00e0f2dfc14abe7ee14088f927c8ee0a935ac0d 9580 git-lfs_2.13.2-1+deb11u1_source.buildinfo
Files:
eabd90160cf1e3053fb251846228071f 2157 vcs optional git-lfs_2.13.2-1+deb11u1.dsc
16ff724daabd304b7ecb438cfb16ec59 461364 vcs optional git-lfs_2.13.2.orig.tar.xz
4a5350b07ef7c64ae1f1ff374a4d1cdc 8080 vcs optional git-lfs_2.13.2-1+deb11u1.debian.tar.xz
e4109cc2071043310967fc952fc43551 9580 vcs optional git-lfs_2.13.2-1+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCZ5CjzgAKCRDoRGtKyMdy
YbghAQDg+efTuAFTxWsBJMdIKcht4fhsY9zZ7ozfe7F2RSStiAD/WW5mzvtrwMUk
mX4/k18fbvgAeWdL6P0uMl6N0z2qHQY=
=Vpac
-----END PGP SIGNATURE-----
Attachment:
pgpcNc8_YEcYB.pgp
Description: PGP signature