Change log for git package in openKylin

git (1:2.43.0-ok4) nile; urgency=medium

  * SECURITY UPDATE: Facilitation of arbitrary code execution     -
    debian/patches/CVE-2024-32002.patch: submodule paths       must not
    contains symlinks in builtin/submodule--helper.c.     - CVE-2024-
    32002   * SECURITY UPDATE: Arbitrary code execution     -
    debian/patches/CVE-2024-32004.patch: detect dubious ownership of
    local repositories in path.c, setup.c, setup.h.     - CVE-2024-32004
    * SECURITY UPDATE: Overwrite of possible malicious hardlink     -
    debian/patches/CVE-2024-32020.patch: refuse clones of unsafe
    repositories in builtin/clonse.c, t0033-safe-directory.sh.     - CVE-
    2024-32020   * SECURITY UPDATE: Unauthenticated attacker to place a
    repository     on their target's local system that contains symlinks
    - debian/patches/CVE-2024-32021.patch: abort when hardlinked source
    and       target file differ in builtin/clone.c     - CVE-2024-32021
    * SECURITY UPDATE: Arbitrary code execution     - debian/patches/CVE-
    2024-32465.patch: disable lazy-fetching by default       in
    builtin/upload-pack.c, promisor-remote.c     - CVE-2024-32465

 -- liubo01 <email address hidden>  Mon, 04 Nov 2024 16:27:31 +0800

Available diffs

• diff from 1:2.43.0-ok3 to 1:2.43.0-ok4 (5.1 KiB)

git (1:2.43.0-ok3) nile; urgency=medium

  * rebuild

 -- liyang <email address hidden>  Wed, 03 Jul 2024 18:49:46 +0800

Available diffs

• diff from 1:2.43.0-ok2 to 1:2.43.0-ok3 (396 bytes)

git (1:2.43.0-ok2) nile; urgency=medium

  * update changelog.

 -- liubo01 <email address hidden>  Sat, 15 Jun 2024 09:35:20 +0800

Available diffs

• diff from 1:2.25.1-ok9 to 1:2.43.0-ok2 (9.0 MiB)

git (1:2.25.1-ok9.2) yangtze; urgency=medium

  * Change build-depends.

 -- zhouganqing <email address hidden>  Tue, 07 Nov 2023 14:09:39 +0800

Available diffs

• diff from 1:2.25.1-ok9 to 1:2.25.1-ok9.2 (915 bytes)
• diff from 1:2.25.1-ok9.1 to 1:2.25.1-ok9.2 (593 bytes)

git (1:2.25.1-ok9.1) yangtze; urgency=medium

  * No-change rebuild.

 -- zhouganqing <email address hidden>  Tue, 07 Nov 2023 10:52:37 +0800

Available diffs

• diff from 1:2.25.1-ok9 to 1:2.25.1-ok9.1 (600 bytes)

git (1:2.25.1-ok9) yangtze; urgency=high

  * indira-bupt CVE-2023-22490 安全更新：Git存在安全漏洞，攻击者利用该漏洞导致数据泄露.
  * indira-bupt CVE-2023-23946 安全更新：Git存在安全漏洞，攻击者利用该漏洞可以访问存储在Web根文件夹之外的文件和目录.

 -- zgy_is <email address hidden>  Tue, 28 Feb 2023 11:20:17 +0800

Available diffs

• diff from 1:2.25.1-ok2 to 1:2.25.1-ok9 (32.8 KiB)
• diff from 1:2.25.1-ok8 to 1:2.25.1-ok9 (4.7 KiB)

git (1:2.25.1-ok8) yangtze; urgency=medium

  * zfj_h CVE-2022-23521 安全更新：Cit验证错误漏洞.
  * zfj_h CVE-2022-41903 安全更新：Cit验证错误漏洞.

 -- huang <email address hidden>  Fri, 24 Feb 2023 10:26:52 +0800

Available diffs

• diff from 1:2.25.1-ok7 to 1:2.25.1-ok8 (7.9 KiB)

git (1:2.25.1-ok7) yangtze; urgency=medium

  * JHP29 CVE-2022-39260 安全更新：Git 存在安全漏洞，该漏洞源于Git错误地处理了某些符号链接。

 -- jianghongpu <email address hidden>  Thu, 23 Feb 2023 16:35:19 +0800

Available diffs

• diff from 1:2.25.1-ok6 to 1:2.25.1-ok7 (2.3 KiB)

git (1:2.25.1-ok6) yangtze; urgency=medium

  * delsinz CVE-2022-39253 安全更新：该漏洞源于Git错误地处理了某些符号链接.

 -- delsin <email address hidden>  Tue, 21 Feb 2023 14:04:41 +0800

Available diffs

• diff from 1:2.25.1-ok5 to 1:2.25.1-ok6 (9.1 KiB)

git (1:2.25.1-ok5) yangtze; urgency=medium

  * kimjuncotton_y CVE-2022-29187 安全更新：Github Git 存在安全漏洞，该漏洞源于可以绕过安全目录保护.

 -- yanggao <email address hidden>  Mon, 20 Feb 2023 16:08:40 +0800

Available diffs

• diff from 1:2.25.1-ok3 to 1:2.25.1-ok5 (8.3 KiB)

git (1:2.25.1-ok3) yangtze; urgency=medium

  * kimjuncotton_y CVE-2021-21300 安全更新：Git 后置链接漏洞.
  * kimjuncotton_y CVE-2021-40330 安全更新：Git 处理逻辑错误漏洞.

 -- yanggao <email address hidden>  Thu, 16 Feb 2023 18:20:07 +0800

Available diffs

• diff from 1:2.25.1-ok2 to 1:2.25.1-ok3 (4.7 KiB)

git (1:2.25.1-ok2) yangtze; urgency=medium

  * update version info

 -- luzhiping <email address hidden>  Mon, 22 Aug 2022 13:57:52 +0800

Available diffs

• diff from 1:2.25.1-ok1 (in Openkylin) to 1:2.25.1-ok2 (504 bytes)

git (1:2.25.1-ok1) yangtze; urgency=medium

  * Build for openKylin.

 -- openKylinBot <email address hidden>  Mon, 25 Apr 2022 22:03:04 +0800