Public bug reported:
Please sync git 1:2.8.0~rc3-1 (main) from Debian unstable (main)
Explanation of the Ubuntu delta and why it can be dropped:
* SECURITY UPDATE: New upstream release to fix denial of service or possible
remote code execution (LP: #1557787)
+ CVE-2016-2324
+ The previous upload only fixed one of the two security issues and 2.7.4
is needed to address the second
* New upstream release, with critical security bugfixes (LP: #1557787)
Included in new release.
Changelog entries since current xenial version 1:2.7.4-0ubuntu1:
git (1:2.8.0~rc3-1) unstable; urgency=medium
* new upstream release candidate (see RelNotes/2.8.0.txt).
* harden against on-stack and on-heap buffer overflows (CVE-2016-2324,
CVE-2016-2315; closes: #818318).
* debian/git.docs: update for README -> README.md renaming.
-- Jonathan Nieder <jrnie...@gmail.com> Wed, 16 Mar 2016 18:28:12
-0700
** Affects: git (Ubuntu)
Importance: Wishlist
Status: New
** Changed in: git (Ubuntu)
Importance: Undecided => Wishlist
** Summary changed:
- Sync git 1:2.8.0~rc3-1 (main) from Debian unstable (main)
+ [Ffe] Sync git 1:2.8.0~rc3-1 (main) from Debian unstable (main)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1563336
Title:
[Ffe] Sync git 1:2.8.0~rc3-1 (main) from Debian unstable (main)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/git/+bug/1563336/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
