-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Jan 2025 18:29:51 +0100 Source: git-lfs Architecture: source Version: 2.13.2-1+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Andrej Shadura <andrewsh@debian.org> Changes: git-lfs (2.13.2-1+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * Apply upstream patch to fix CVE-2024-53263: - Reject LF bytes in credential data Checksums-Sha1: bc401a7b091b9a196f535e386ebd4f8e5ff24611 2157 git-lfs_2.13.2-1+deb11u1.dsc a48f3f53fa699ff98f616a7865b6af53afd5c705 461364 git-lfs_2.13.2.orig.tar.xz ec8d4fbcae8ad5b45866f63ead21eb0aba6437d3 8080 git-lfs_2.13.2-1+deb11u1.debian.tar.xz 452f4020109b880b398ed9f8825980de376014c5 9580 git-lfs_2.13.2-1+deb11u1_source.buildinfo Checksums-Sha256: 8233a8b88ec27840cf43715966ae3b65cad0c52d8d79cd1a3cc6fb7dd8ce8bad 2157 git-lfs_2.13.2-1+deb11u1.dsc 6c719179780dc4a06b0ae7dc412a91263ec958bc32d0292e1e5138a4a1563d89 461364 git-lfs_2.13.2.orig.tar.xz b88ae761e3182a8f0ab8ad6b0e20c36041278e2f390d58d736acd9f10c009d40 8080 git-lfs_2.13.2-1+deb11u1.debian.tar.xz c1f4cfdd8d0f5fb2ba2f1693c00e0f2dfc14abe7ee14088f927c8ee0a935ac0d 9580 git-lfs_2.13.2-1+deb11u1_source.buildinfo Files: eabd90160cf1e3053fb251846228071f 2157 vcs optional git-lfs_2.13.2-1+deb11u1.dsc 16ff724daabd304b7ecb438cfb16ec59 461364 vcs optional git-lfs_2.13.2.orig.tar.xz 4a5350b07ef7c64ae1f1ff374a4d1cdc 8080 vcs optional git-lfs_2.13.2-1+deb11u1.debian.tar.xz e4109cc2071043310967fc952fc43551 9580 vcs optional git-lfs_2.13.2-1+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQSD3NF/RLIsyDZW7aHoRGtKyMdyYQUCZ5CjzgAKCRDoRGtKyMdy YbghAQDg+efTuAFTxWsBJMdIKcht4fhsY9zZ7ozfe7F2RSStiAD/WW5mzvtrwMUk mX4/k18fbvgAeWdL6P0uMl6N0z2qHQY= =Vpac -----END PGP SIGNATURE-----