UbuntuUpdates.org

Package "git"


Moved to focal:main:base


Name: git

Description:

fast, scalable, distributed revision control system
Latest version: *DELETED*
Release: focal (20.04)
Level: proposed
Repository: main
Homepage: https://git-scm.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "git"

APT INSTALL

Other versions of "git" in Focal

Repository Area Version
base main 1:2.25.1-1ubuntu3
base universe 1:2.25.1-1ubuntu3
security main 1:2.25.1-1ubuntu3.14
security universe 1:2.25.1-1ubuntu3.14
updates universe 1:2.25.1-1ubuntu3.14
updates main 1:2.25.1-1ubuntu3.14

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: *DELETED* 2020-04-21 17:06:18 UTC
Moved to focal:main:base
No changelog for deleted or moved packages.

Version: 1:2.25.1-1ubuntu3 2020-04-21 10:06:26 UTC

  git (1:2.25.1-1ubuntu3) focal; urgency=medium

  * SECURITY UPDATE: credential helper issue with missing host or scheme
    - debian/patches/CVE-2020-11008-1.patch: make "quit" helper more
      realistic in t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-2.patch: use more realistic inputs in
      t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-3.patch: parse URL without host as
      empty host, not unset in credential.c, http.c,
      t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-4.patch: refuse to operate when missing
      host or protocol in credential.c, t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-5.patch: convert gitmodules url to URL
      passed to curl in fsck.c, t/t7416-submodule-dash-url.sh.
    - debian/patches/CVE-2020-11008-6.patch: die() when parsing invalid
      urls in credential.c, t/t0300-credentials.sh.
    - debian/patches/CVE-2020-11008-7.patch: treat URL without scheme as
      invalid in credential.c, fsck.c, t/t5550-http-fetch-dumb.sh,
      t/t7416-submodule-dash-url.sh.
    - debian/patches/CVE-2020-11008-8.patch: treat URL with empty scheme as
      invalid in credential.c, t/t5550-http-fetch-dumb.sh,
      t/t7416-submodule-dash-url.sh.
    - debian/patches/CVE-2020-11008-9.patch: reject URL with empty host in
      .gitmodules in fsck.c, t/t7416-submodule-dash-url.sh.
    - CVE-2020-11008

 -- Marc Deslauriers <email address hidden> Mon, 20 Apr 2020 11:50:03 -0400

Version: *DELETED* 2020-04-16 18:06:37 UTC
Moved to focal:main:base
No changelog for deleted or moved packages.

Version: 1:2.25.1-1ubuntu2 2020-04-15 21:06:29 UTC

  git (1:2.25.1-1ubuntu2) focal; urgency=medium

  * SECURITY UPDATE: credential helper issue with newlines in URL
    - debian/patches/CVE-2020-5260-1.patch: avoid writing values with
      newlines in credential.c, t/t0300-credentials.sh.
    - debian/patches/CVE-2020-5260-2.patch: use test_i18ncmp to check
      stderr in t/lib-credential.sh.
    - debian/patches/CVE-2020-5260-3.patch: detect unrepresentable values
      when parsing urls in credential.c, credential.h,
      t/t0300-credentials.sh.
    - debian/patches/CVE-2020-5260-4.patch: detect gitmodules URLs with
      embedded newlines in fsck.c, t/t7416-submodule-dash-url.sh.
    - CVE-2020-5260

 -- Marc Deslauriers <email address hidden> Tue, 14 Apr 2020 08:31:47 -0400
CVE-2020-5260 Affected versions of Git have a vulnerability whereby Git can be trick ...


About   -   Send Feedback to @ubuntu_updates