-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 31 May 2026 11:25:03 +0200 Source: git-lfs Architecture: source Version: 2.13.2-1+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Andrej Shadura <andrewsh@debian.org> Changes: git-lfs (2.13.2-1+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * Backport upstream fixes for CVE-2025-26625: - Create new files on checkout and pull - Check for dir/symlink conflicts on checkout/pull - Fix bare repo pull/checkout path handling bug. Checksums-Sha1: c23cd2ac08ec2db93dae5625f83199ef0d0993f1 2257 git-lfs_2.13.2-1+deb11u2.dsc 3a1e056d6e611fdba08b930056441bb45ec97423 34168 git-lfs_2.13.2-1+deb11u2.debian.tar.xz 7c5fcbb52c4f709ca0b25e5023416975552a6dd5 11001 git-lfs_2.13.2-1+deb11u2_source.buildinfo Checksums-Sha256: ad4aeae9a983295dddc3207d8db43dffb39614012524acec25476221c0185439 2257 git-lfs_2.13.2-1+deb11u2.dsc 336e2daf609ac60e9c186ed4f90298170598d52ac8189dd6c72f3e423c7d5050 34168 git-lfs_2.13.2-1+deb11u2.debian.tar.xz b5e3e4a9e8ff981d51105c33294678de83caab23b09f888bbdf4ea47ffaca6bf 11001 git-lfs_2.13.2-1+deb11u2_source.buildinfo Files: 2ef77d0d0dcdb1446f14b1e916661044 2257 vcs optional git-lfs_2.13.2-1+deb11u2.dsc 3b5f415ca34d0b39bb4b1f28eaf0ecd9 34168 vcs optional git-lfs_2.13.2-1+deb11u2.debian.tar.xz ca7fb3129f2ff57e1f618e4264e32528 11001 vcs optional git-lfs_2.13.2-1+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- wr0EARYKAG8FgmocAkcJEOhEa0rIx3JhRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z LnNlcXVvaWEtcGdwLm9yZ+REkYbRLYNJEQINAqiBdq2yM6PiFGP6M++K4Gl0quUx FiEEg9zRf0SyLMg2Vu2h6ERrSsjHcmEAAO90AQDj4PnTA+FOj9rHCqmRUbAaH9zs k2lW9QH8RqW3bhrdNwD+LzwRMS9YxhApyLBcyMEF8ODtTqOiRT3h+FhzClON7Q4= =VCjv -----END PGP SIGNATURE-----
