-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Jan 2025 20:46:03 +0100
Source: git
Binary: git git-dbgsym
Architecture: amd64
Version: 1:2.39.5-0+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 git        - fast, scalable, distributed revision control system
Changes:
 git (1:2.39.5-0+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * credential_format(): also encode <host>[:<port>]
   * credential: sanitize the user prompt (CVE-2024-50349)
   * credential: disallow Carriage Returns in the protocol by default
     (CVE-2024-52006)
Checksums-Sha1:
 df10878d88dab4f0086fc5b066e74a07a5943541 44303456 git-dbgsym_2.39.5-0+deb12u2_amd64.deb
 82eabaa9850b7a1c470a365bf629777b75f32c76 8603 git_2.39.5-0+deb12u2_amd64-buildd.buildinfo
 3e3c0521b639de7b3c119284a241eb0dda0edefc 7259684 git_2.39.5-0+deb12u2_amd64.deb
Checksums-Sha256:
 f9729a579639c1fa8141fd176bdb5b4f60e0dc9e794874f5fcc5905598a45991 44303456 git-dbgsym_2.39.5-0+deb12u2_amd64.deb
 ba1e974fe2dd1e98e3d58943b45b37ac685105c2097d19b71de9ea28dd965cff 8603 git_2.39.5-0+deb12u2_amd64-buildd.buildinfo
 5446b1f6c6f9f058e7b22413b650a45b527c979eb2276d33f46570265ee5eb35 7259684 git_2.39.5-0+deb12u2_amd64.deb
Files:
 3854284b01c9268634366ae6208bee42 44303456 debug optional git-dbgsym_2.39.5-0+deb12u2_amd64.deb
 b117978c40f56caa25565009cd1de722 8603 vcs optional git_2.39.5-0+deb12u2_amd64-buildd.buildinfo
 42d6f138c089266cc747d94e47420989 7259684 vcs optional git_2.39.5-0+deb12u2_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEgdRoRGwEM09wlaMzOni7ZmUpKEcFAmeEJJIACgkQOni7ZmUp
KEfxHQ//aqm+ohgG9sgz7wPSWNpJRmXMdVLTjq5Jnabd9ovIVpp/ucN4a4SKlHOx
OSpIRmS8bZDK8TbiuiVnOl0OiWgFhf8flhJonsAxmyBomHCRTkFuaTCsM5m4JSXI
vJVK77dUYMydG+qxYe+RKm1F+KRmuQVtwODVVao0dU7isryzC/ZNbMjioMSzplFt
XA4RmQXaXLPW7iFCX1apDBpfbRNJAC4wdwZ16uW8sppQPGltbvhJl1ZJS1WAdn2H
H0gpqzcgHCqZI4iGuVf9x68U5nuPBkui97+I9ftYoTKzR4EueiZwJNajq+LM0H5Q
QQ3ltfxON6ZHM/R4/jx6F+kvqmmuAl8mso5gVT3ipTnIlR34pYsE6BMgUIu7r8mR
uzbuq0+v8u57dL1UWkgixnClJXIkiUvJtra58jKmqEEu/70YGCtT0tRxnHkg12Qz
8OAjkeVeecbBP4l9kPyr0Zk6KvILYZDDOpEqvXEC5t1bVjd5fIIO2ZPufdtty5qZ
qpUOjYxkoup4Wh4B0dtaDIGYNoF7b+zonfu3cnyxqUp4W/lJslr8uSQU/0f/U202
H1yinV/qn3pdvSKGy+tXaTm/WrhbhzHc+2BQ+VVn3CitSeX8VtZZahs8AtlY1t7b
GYHocv3PTqIgEsGztft/bQluX+xlfJ+lIYUMtRDvb3L0GkCk33Y=
=r19I
-----END PGP SIGNATURE-----