Ubuntu
git package

git 1:2.14.1-1ubuntu4.1 source package in Ubuntu

Changelog

git (1:2.14.1-1ubuntu4.1) artful-security; urgency=medium

  * SECURITY UPDATE: arbitrary code execution via
    submodule names in .gitsubmodules.
    - 0001-submodule-config-verify-submodule-names-as-paths.patch
    - 012-fsck-simplify-.git-check.patch
    - 013-fsck-actually-fsck-blob-data.patch
    - 014-fsck-detect-gitmodules-files.patch
    - 015-fsck-check-.gitmodules-content.patch
    - 016-fsck-call-fsck_finish-after-fscking-objects.patch
    - 017-unpack-objects-call-fsck_finish-after-fscking-object.patch
    - 018-index-pack-check-.gitmodules-files-with-strict.patch
    - CVE-2018-11235 (LP: #1774061)
  * SECURITY UPDATE: out-of-bounds memory access when sanity-checking
    pathnames on NTFS
    - 0002-is_ntfs_dotgit-use-a-size_t-for-traversing-string.patch
    - CVE-2018-11233
  * Do not allow .gitmodules to be a symlink:
    - 003-is_hfs_dotgit-match-other-.git-files.patch
    - 004-is_ntfs_dotgit-match-other-.git-files.patch
    - 005-is_-hfs-ntfs-_dotgitmodules-add-tests.patch
    - 006-skip_prefix-add-case-insensitive-variant.patch
    - 007-verify_path-drop-clever-fallthrough.patch
    - 008-verify_dotfile-mention-case-insensitivity-in-comment.patch
    - 009-update-index-stat-updated-files-earlier.patch
    - 010-verify_path-disallow-symlinks-in-.gitmodules.patch
    - 011-index-pack-make-fsck-error-message-more-specific.patch
    - 019-fsck-complain-when-.gitmodules-is-a-symlink.patch
  * debian/rules: ensure added tests are executable.

 -- Steve Beattie <email address hidden>  Thu, 31 May 2018 22:52:33 -0700

Upload details

Uploaded by:
Steve Beattie
Uploaded to:
Artful
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
vcs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
git_2.14.1.orig.tar.xz 4.6 MiB 6f724c6d0e9e13114ab35db6f67e1b2c1934b641e89366e6a0e37618231f2cc6
git_2.14.1-1ubuntu4.1.debian.tar.xz 554.8 KiB 6cbdc196712a4b9159d8950c03b1626f8fb295c76e8d3f70cd3086bfd97d2061
git_2.14.1-1ubuntu4.1.dsc 2.9 KiB df7e5b50e925601a802ef5542768c5aae6983f3306e55edac6563e875e91228d

View changes file

Binary packages built by this source

git: No summary available for git in ubuntu artful.

No description available for git in ubuntu artful.

git-all: No summary available for git-all in ubuntu artful.

No description available for git-all in ubuntu artful.

git-core: No summary available for git-core in ubuntu artful.

No description available for git-core in ubuntu artful.

git-cvs: No summary available for git-cvs in ubuntu artful.

No description available for git-cvs in ubuntu artful.

git-daemon-run: No summary available for git-daemon-run in ubuntu artful.

No description available for git-daemon-run in ubuntu artful.

git-daemon-sysvinit: No summary available for git-daemon-sysvinit in ubuntu artful.

No description available for git-daemon-sysvinit in ubuntu artful.

git-dbgsym: No summary available for git-dbgsym in ubuntu artful.

No description available for git-dbgsym in ubuntu artful.

git-doc: No summary available for git-doc in ubuntu artful.

No description available for git-doc in ubuntu artful.

git-el: No summary available for git-el in ubuntu artful.

No description available for git-el in ubuntu artful.

git-email: No summary available for git-email in ubuntu artful.

No description available for git-email in ubuntu artful.

git-gui: No summary available for git-gui in ubuntu artful.

No description available for git-gui in ubuntu artful.

git-man: No summary available for git-man in ubuntu artful.

No description available for git-man in ubuntu artful.

git-mediawiki: No summary available for git-mediawiki in ubuntu artful.

No description available for git-mediawiki in ubuntu artful.

git-svn: No summary available for git-svn in ubuntu artful.

No description available for git-svn in ubuntu artful.

gitk: No summary available for gitk in ubuntu artful.

No description available for gitk in ubuntu artful.

gitweb: No summary available for gitweb in ubuntu artful.

No description available for gitweb in ubuntu artful.