Author: Ubuntu Git Importer
Author Date: 2019-07-17 10:01:40 UTC

DSC file for 1:2.22.0+next.20190715-1

Author: Jonathan Nieder
Author Date: 2019-07-16 00:12:38 UTC

Import patches-applied version 1:2.22.0+next.20190715-1 to applied/debian/experimental

Imported using git-ubuntu import.

Changelog parent: 852734c880e4978a099e4f025e232c13c59ccd5b
Unapplied parent: d4ae1bf6f14c0ffde8202d15492e18f2f66859d8

New changelog entries:
  * new snapshot, taken from upstream commit 960e92d2.

Author: Jonathan Nieder
Author Date: 2019-07-16 00:12:38 UTC

Import patches-unapplied version 1:2.22.0+next.20190715-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: d2f6016df3c798dacd91c97ae97eb4feaf8ad8c4

New changelog entries:
  * new snapshot, taken from upstream commit 960e92d2.

Author: Jonathan Nieder
Author Date: 2019-07-08 17:50:51 UTC

Import patches-unapplied version 1:2.22.0-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: ae1ae23b3be70e0173ecf580349b6f78f958c877

New changelog entries:
  * new upstream release (see RelNotes/2.21.0.txt, RelNotes/2.22.0.txt).

Author: Jonathan Nieder
Author Date: 2019-07-08 17:50:51 UTC

Import patches-applied version 1:2.22.0-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 13918fbb9fe3cbe24d5f8aeecb4a5aa2863f8287
Unapplied parent: 3bc35e4f5e8d6bda7a2b159a67f7ffed75b73ebc

New changelog entries:
  * new upstream release (see RelNotes/2.21.0.txt, RelNotes/2.22.0.txt).

Author: Ubuntu Git Importer
Author Date: 2019-01-30 15:47:59 UTC

DSC file for 1:2.20.1-2ubuntu1

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-applied version 1:2.20.1-2ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 13918fbb9fe3cbe24d5f8aeecb4a5aa2863f8287
Unapplied parent: 189f2e2a8444d18803f0a9dfb8e92157d09f94a3

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-applied version 1:2.20.1-2ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 13918fbb9fe3cbe24d5f8aeecb4a5aa2863f8287
Unapplied parent: 189f2e2a8444d18803f0a9dfb8e92157d09f94a3

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-applied version 1:2.20.1-2ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 13918fbb9fe3cbe24d5f8aeecb4a5aa2863f8287
Unapplied parent: 189f2e2a8444d18803f0a9dfb8e92157d09f94a3

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-applied version 1:2.20.1-2ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 13918fbb9fe3cbe24d5f8aeecb4a5aa2863f8287
Unapplied parent: 189f2e2a8444d18803f0a9dfb8e92157d09f94a3

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-unapplied version 1:2.20.1-2ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: ae1ae23b3be70e0173ecf580349b6f78f958c877

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-unapplied version 1:2.20.1-2ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: ae1ae23b3be70e0173ecf580349b6f78f958c877

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-applied version 1:2.20.1-2ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 13918fbb9fe3cbe24d5f8aeecb4a5aa2863f8287
Unapplied parent: 189f2e2a8444d18803f0a9dfb8e92157d09f94a3

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-unapplied version 1:2.20.1-2ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: ae1ae23b3be70e0173ecf580349b6f78f958c877

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-unapplied version 1:2.20.1-2ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: ae1ae23b3be70e0173ecf580349b6f78f958c877

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-unapplied version 1:2.20.1-2ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: ae1ae23b3be70e0173ecf580349b6f78f958c877

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-unapplied version 1:2.20.1-2ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: ae1ae23b3be70e0173ecf580349b6f78f958c877

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jeremy Bicha
Author Date: 2019-01-23 16:30:48 UTC

Import patches-applied version 1:2.20.1-2ubuntu1 to applied/ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 13918fbb9fe3cbe24d5f8aeecb4a5aa2863f8287
Unapplied parent: 189f2e2a8444d18803f0a9dfb8e92157d09f94a3

New changelog entries:
  * Merge with Debian; remaining change:
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)
  * Dropped change:
    - Build against pcre3 (pcre2 is now in main) (LP: #1792544)

Author: Jonathan Nieder
Author Date: 2019-01-22 06:32:28 UTC

Import patches-applied version 1:2.20.1-2 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: aaeb0783f9771976c1394fae006ba877977d0eea
Unapplied parent: ae1ae23b3be70e0173ecf580349b6f78f958c877

New changelog entries:
  * package git-gui: actually Suggests: meld for mergetool support;
    describe what meld is used for in package description (thx Jens
    Reyer; closes: #707790).
  * package gitweb: Depends: libhttp-date-perl | libtime-parsedate-perl
    instead of ... | libtime-modules-perl (thx gregor herrmann; closes:
    #879165).
  * debian/control: use https in Vcs-Browser URL.
  * debian/rules: build and test quietly if DEB_BUILD_OPTIONS=terse.
  * debian/control: Standards-Version: 4.3.0.1.

Author: Jonathan Nieder
Author Date: 2019-01-22 06:32:28 UTC

Import patches-unapplied version 1:2.20.1-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 2d441131e882ca1504d6f0b1b0043f05c7f9a134

New changelog entries:
  * package git-gui: actually Suggests: meld for mergetool support;
    describe what meld is used for in package description (thx Jens
    Reyer; closes: #707790).
  * package gitweb: Depends: libhttp-date-perl | libtime-parsedate-perl
    instead of ... | libtime-modules-perl (thx gregor herrmann; closes:
    #879165).
  * debian/control: use https in Vcs-Browser URL.
  * debian/rules: build and test quietly if DEB_BUILD_OPTIONS=terse.
  * debian/control: Standards-Version: 4.3.0.1.

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:58:29 UTC

Import patches-applied version 1:2.7.4-0ubuntu1.6 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 150216bb03d03fdbcb58a57bb75a4743e3bdf68c
Unapplied parent: 5d9800f77c12307dc89edfad2abef6e188186345

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:20:24 UTC

Import patches-applied version 1:2.17.1-1ubuntu0.4 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 355419980c73452a994f02e3c65a109766172eb2
Unapplied parent: 8cd0c5aa55473b4610460c94ddceb5b0e191c856

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:58:29 UTC

Import patches-unapplied version 1:2.7.4-0ubuntu1.6 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 66e849de62837e3368be1d9ea082651c6f8f1c9d

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:39:30 UTC

Import patches-unapplied version 1:2.19.1-1ubuntu1.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: d4c0cff46b2761a44c60659b289fa1cca763655a

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:50:20 UTC

Import patches-unapplied version 1:1.9.1-1ubuntu0.10 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: c08054e03e95ca9d1f34631815dfaafc908e6310

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:39:30 UTC

Import patches-applied version 1:2.19.1-1ubuntu1.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 954b5f71844bab71e1d46b6dcd057b7c569acfe2
Unapplied parent: 9bde4367477e575dbc3c61ad4171e4327b185aa4

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:39:30 UTC

Import patches-applied version 1:2.19.1-1ubuntu1.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 954b5f71844bab71e1d46b6dcd057b7c569acfe2
Unapplied parent: 9bde4367477e575dbc3c61ad4171e4327b185aa4

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:58:29 UTC

Import patches-applied version 1:2.7.4-0ubuntu1.6 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 150216bb03d03fdbcb58a57bb75a4743e3bdf68c
Unapplied parent: 5d9800f77c12307dc89edfad2abef6e188186345

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:50:20 UTC

Import patches-applied version 1:1.9.1-1ubuntu0.10 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: a6e0f565c4aa9f7980bfc7d2d889ccee50b99fb4
Unapplied parent: 305e74df8d9c5dcd3bfb2504151ee6570f3d0c5b

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:58:29 UTC

Import patches-applied version 1:2.7.4-0ubuntu1.6 to applied/ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 150216bb03d03fdbcb58a57bb75a4743e3bdf68c
Unapplied parent: 5d9800f77c12307dc89edfad2abef6e188186345

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:20:24 UTC

Import patches-applied version 1:2.17.1-1ubuntu0.4 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 355419980c73452a994f02e3c65a109766172eb2
Unapplied parent: 8cd0c5aa55473b4610460c94ddceb5b0e191c856

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:39:30 UTC

Import patches-unapplied version 1:2.19.1-1ubuntu1.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: d4c0cff46b2761a44c60659b289fa1cca763655a

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:50:20 UTC

Import patches-unapplied version 1:1.9.1-1ubuntu0.10 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: c08054e03e95ca9d1f34631815dfaafc908e6310

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:58:29 UTC

Import patches-unapplied version 1:2.7.4-0ubuntu1.6 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 66e849de62837e3368be1d9ea082651c6f8f1c9d

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:58:29 UTC

Import patches-unapplied version 1:2.7.4-0ubuntu1.6 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: 66e849de62837e3368be1d9ea082651c6f8f1c9d

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:50:20 UTC

Import patches-unapplied version 1:1.9.1-1ubuntu0.10 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: c08054e03e95ca9d1f34631815dfaafc908e6310

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:39:30 UTC

Import patches-applied version 1:2.19.1-1ubuntu1.1 to applied/ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: 954b5f71844bab71e1d46b6dcd057b7c569acfe2
Unapplied parent: 9bde4367477e575dbc3c61ad4171e4327b185aa4

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:20:24 UTC

Import patches-unapplied version 1:2.17.1-1ubuntu0.4 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: b9ecd9e5f728edb21d516def79ab19b9255e8b01

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:50:20 UTC

Import patches-applied version 1:1.9.1-1ubuntu0.10 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: a6e0f565c4aa9f7980bfc7d2d889ccee50b99fb4
Unapplied parent: 305e74df8d9c5dcd3bfb2504151ee6570f3d0c5b

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:20:24 UTC

Import patches-unapplied version 1:2.17.1-1ubuntu0.4 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: b9ecd9e5f728edb21d516def79ab19b9255e8b01

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:39:30 UTC

Import patches-unapplied version 1:2.19.1-1ubuntu1.1 to ubuntu/cosmic-security

Imported using git-ubuntu import.

Changelog parent: d4c0cff46b2761a44c60659b289fa1cca763655a

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:20:24 UTC

Import patches-applied version 1:2.17.1-1ubuntu0.4 to applied/ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 355419980c73452a994f02e3c65a109766172eb2
Unapplied parent: 8cd0c5aa55473b4610460c94ddceb5b0e191c856

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 14:20:24 UTC

Import patches-unapplied version 1:2.17.1-1ubuntu0.4 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: b9ecd9e5f728edb21d516def79ab19b9255e8b01

New changelog entries:
  * SECURITY UPDATE: Unsafe command execution
    - debian/patches/CVE-2018-19486.patch: fix in
      run-command.c, t/t0061-run-command.sh.
    - CVE-2018-19486

Author: Leonidas S. Barbosa
Author Date: 2018-11-26 12:50:20 UTC

Import patches-applied version 1:1.9.1-1ubuntu0.10 to applied/ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: a6e0f565c4aa9f7980bfc7d2d889ccee50b99fb4
Unapplied parent: 305e74df8d9c5dcd3bfb2504151ee6570f3d0c5b

New changelog entries:
  * SECURITY UPDATE: Denial of service
    - debian/patches/CVE-2017-15298.patch: fix in diff.h,
      revision.c.
    - CVE-2017-15298

Author: Jonathan Nieder
Author Date: 2018-09-28 02:35:44 UTC

Import patches-applied version 1:2.11.0-3+deb9u4 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 436edc00d82760999e4973e02a5abed0bbd8ae99
Unapplied parent: 8436374ab176d6ab2f972ee3cfb21c7af756f7ea

New changelog entries:
  * Fix CVE-2018-17456, arbitrary code execution via submodule URLs
    and paths in .gitmodules file:
    - submodule: ban submodule urls that start with a dash
    - submodule: ban submodule paths that start with a dash
    - submodule: use "--" to signal end of clone options
    - fsck: detect submodule urls that start with a dash
    - fsck: detect submodule paths that start with a dash
    Thanks to joernchen of Phenoelit for discovering and reporting
    this vulnerability and to Jeff King for fixing it.
  * Correct incomplete shell command injection fix in git cvsimport in
    1:2.11.0-3+deb9u2. A malicious CVS server could trigger
    arbitrary code execution by a user running "git cvsimport".
    - cvsimport: apply shell-quoting regex globally
    Thanks to littlelailo for discovering this vulnerability and to
    Jeff King for fixing it.

Author: Jonathan Nieder
Author Date: 2018-09-28 02:35:44 UTC

Import patches-unapplied version 1:2.11.0-3+deb9u4 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: 9a0536c0a4f682be5cc3edb56780876713d9c1ec

New changelog entries:
  * Fix CVE-2018-17456, arbitrary code execution via submodule URLs
    and paths in .gitmodules file:
    - submodule: ban submodule urls that start with a dash
    - submodule: ban submodule paths that start with a dash
    - submodule: use "--" to signal end of clone options
    - fsck: detect submodule urls that start with a dash
    - fsck: detect submodule paths that start with a dash
    Thanks to joernchen of Phenoelit for discovering and reporting
    this vulnerability and to Jeff King for fixing it.
  * Correct incomplete shell command injection fix in git cvsimport in
    1:2.11.0-3+deb9u2. A malicious CVS server could trigger
    arbitrary code execution by a user running "git cvsimport".
    - cvsimport: apply shell-quoting regex globally
    Thanks to littlelailo for discovering this vulnerability and to
    Jeff King for fixing it.

Author: Jeremy Bicha
Author Date: 2018-10-05 22:15:54 UTC

Import patches-unapplied version 1:2.19.1-1ubuntu1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 2a81b5305f97c738bd48f2be016d4be886efaad5

New changelog entries:
  * Merge with Debian; remaining changes:
    - debian/control: build against pcre v3 only
    - debian/rules: s390x libpcre3 library has JIT disabled, set
      NO_LIBPCRE1_JIT on that arch to stop the build from failing.
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)

Author: Jeremy Bicha
Author Date: 2018-10-05 22:15:54 UTC

Import patches-unapplied version 1:2.19.1-1ubuntu1 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 2a81b5305f97c738bd48f2be016d4be886efaad5

New changelog entries:
  * Merge with Debian; remaining changes:
    - debian/control: build against pcre v3 only
    - debian/rules: s390x libpcre3 library has JIT disabled, set
      NO_LIBPCRE1_JIT on that arch to stop the build from failing.
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)

Author: Jeremy Bicha
Author Date: 2018-10-05 22:15:54 UTC

Import patches-applied version 1:2.19.1-1ubuntu1 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: a83a43a30f0d5326e450ac6b51f91e336428582e
Unapplied parent: d4c0cff46b2761a44c60659b289fa1cca763655a

New changelog entries:
  * Merge with Debian; remaining changes:
    - debian/control: build against pcre v3 only
    - debian/rules: s390x libpcre3 library has JIT disabled, set
      NO_LIBPCRE1_JIT on that arch to stop the build from failing.
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)

Author: Jeremy Bicha
Author Date: 2018-10-05 22:15:54 UTC

Import patches-applied version 1:2.19.1-1ubuntu1 to applied/ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: a83a43a30f0d5326e450ac6b51f91e336428582e
Unapplied parent: d4c0cff46b2761a44c60659b289fa1cca763655a

New changelog entries:
  * Merge with Debian; remaining changes:
    - debian/control: build against pcre v3 only
    - debian/rules: s390x libpcre3 library has JIT disabled, set
      NO_LIBPCRE1_JIT on that arch to stop the build from failing.
    - Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)

Author: Adam Conrad
Author Date: 2018-09-20 09:34:49 UTC

Import patches-applied version 1:2.17.1-1ubuntu0.2 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: b8b2574665b33fc9919c5f2d2a78c4f6a1c83868
Unapplied parent: 2285dc8769aea2dc7c3f0a83a3df708eb499113f

New changelog entries:
  * Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)

Author: Adam Conrad
Author Date: 2018-09-20 09:34:49 UTC

Import patches-unapplied version 1:2.17.1-1ubuntu0.2 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: cf94b7ad45c957959eed201ce44afd6eba6d6967

New changelog entries:
  * Build diff-highlight in the contrib dir (closes: #868871, LP: #1713690)

Author: Jonathan Nieder
Author Date: 2018-05-28 23:30:30 UTC

Import patches-applied version 1:2.1.4-2.1+deb8u6 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: 5bd283eade336e6bf6dbe5b5b18060ad7625fbdd
Unapplied parent: b746829d6bbccce8aa90973a7927563cee44fb48

New changelog entries:
  * Fix CVE-2018-11235, arbitrary code execution via submodule names
    in .gitmodules file:
    - submodule: verify submodule names as paths
    - fsck: drop inode-sorting code
    - fsck: simplify ".git" check
    - fsck: fsck blob data
    - fsck: detect gitmodules files
    - fsck: check .gitmodules content
    - fsck: call fsck_finish after fscking objects
    - unpack-objects: call fsck_finish after fscking objects
    - index-pack: check .gitmodules files with --strict
  * Fix CVE-2018-11233, out-of-bounds read when validating NTFS paths:
    - is_ntfs_dotgit: use a size_t for traversing string
  * Do not allow .gitmodules to be a symlink:
    - is_hfs_dotgit: loosen over-eager match of \u{..47}
    - is_hfs_dotgit: match other .git* files
    - is_ntfs_dotgit: match other .git* files
    - is_{hfs,ntfs}_dotgitmodules: add tests
    - skip_prefix: add case-insensitive variant
    - verify_path: drop clever fallthrough
    - verify_dotfile: mention case-insensitivity in comment
    - update-index: stat updated files earlier
    - verify_path: disallow .gitmodules symlinks
    - fsck: complain when .gitmodules is a symlink
  Thanks to Brandon Williams, Etienne Stalmans, and Jeff King for
  discovering and reporting these vulnerabilities and to Jeff King and
  Johannes Schindelin for fixing them.
  * Prevent "git apply" without --index from escaping the current
    directory (compare GNU patch's CVE-2015-1196):
    - apply: reject input that touches outside the working area
    - apply: do not read from the filesystem under --index
    - apply: do not read from beyond a symbolic link
    - apply: do not touch a file beyond a symbolic link
  Thanks to Josh Boyer for reporting this vulnerability and Junio C
  Hamano for fixing it.

Author: Jonathan Nieder
Author Date: 2018-05-28 23:30:30 UTC

Import patches-unapplied version 1:2.1.4-2.1+deb8u6 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: f591409d98be6221eb8f68da7ea84a2171d851c8

New changelog entries:
  * Fix CVE-2018-11235, arbitrary code execution via submodule names
    in .gitmodules file:
    - submodule: verify submodule names as paths
    - fsck: drop inode-sorting code
    - fsck: simplify ".git" check
    - fsck: fsck blob data
    - fsck: detect gitmodules files
    - fsck: check .gitmodules content
    - fsck: call fsck_finish after fscking objects
    - unpack-objects: call fsck_finish after fscking objects
    - index-pack: check .gitmodules files with --strict
  * Fix CVE-2018-11233, out-of-bounds read when validating NTFS paths:
    - is_ntfs_dotgit: use a size_t for traversing string
  * Do not allow .gitmodules to be a symlink:
    - is_hfs_dotgit: loosen over-eager match of \u{..47}
    - is_hfs_dotgit: match other .git* files
    - is_ntfs_dotgit: match other .git* files
    - is_{hfs,ntfs}_dotgitmodules: add tests
    - skip_prefix: add case-insensitive variant
    - verify_path: drop clever fallthrough
    - verify_dotfile: mention case-insensitivity in comment
    - update-index: stat updated files earlier
    - verify_path: disallow .gitmodules symlinks
    - fsck: complain when .gitmodules is a symlink
  Thanks to Brandon Williams, Etienne Stalmans, and Jeff King for
  discovering and reporting these vulnerabilities and to Jeff King and
  Johannes Schindelin for fixing them.
  * Prevent "git apply" without --index from escaping the current
    directory (compare GNU patch's CVE-2015-1196):
    - apply: reject input that touches outside the working area
    - apply: do not read from the filesystem under --index
    - apply: do not read from beyond a symbolic link
    - apply: do not touch a file beyond a symbolic link
  Thanks to Josh Boyer for reporting this vulnerability and Junio C
  Hamano for fixing it.

Author: Steve Beattie
Author Date: 2018-06-01 05:52:33 UTC

Import patches-applied version 1:2.14.1-1ubuntu4.1 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 5bbc311d7bb7a7f09b78d4f983aff498129e0440
Unapplied parent: afe5778f57483cd77174eb9cc5b74353c5c2052a

New changelog entries:
  * SECURITY UPDATE: arbitrary code execution via
    submodule names in .gitsubmodules.
    - 0001-submodule-config-verify-submodule-names-as-paths.patch
    - 012-fsck-simplify-.git-check.patch
    - 013-fsck-actually-fsck-blob-data.patch
    - 014-fsck-detect-gitmodules-files.patch
    - 015-fsck-check-.gitmodules-content.patch
    - 016-fsck-call-fsck_finish-after-fscking-objects.patch
    - 017-unpack-objects-call-fsck_finish-after-fscking-object.patch
    - 018-index-pack-check-.gitmodules-files-with-strict.patch
    - CVE-2018-11235 (LP: #1774061)
  * SECURITY UPDATE: out-of-bounds memory access when sanity-checking
    pathnames on NTFS
    - 0002-is_ntfs_dotgit-use-a-size_t-for-traversing-string.patch
    - CVE-2018-11233
  * Do not allow .gitmodules to be a symlink:
    - 003-is_hfs_dotgit-match-other-.git-files.patch
    - 004-is_ntfs_dotgit-match-other-.git-files.patch
    - 005-is_-hfs-ntfs-_dotgitmodules-add-tests.patch
    - 006-skip_prefix-add-case-insensitive-variant.patch
    - 007-verify_path-drop-clever-fallthrough.patch
    - 008-verify_dotfile-mention-case-insensitivity-in-comment.patch
    - 009-update-index-stat-updated-files-earlier.patch
    - 010-verify_path-disallow-symlinks-in-.gitmodules.patch
    - 011-index-pack-make-fsck-error-message-more-specific.patch
    - 019-fsck-complain-when-.gitmodules-is-a-symlink.patch
  * debian/rules: ensure added tests are executable.

Author: Steve Beattie
Author Date: 2018-06-01 05:52:33 UTC

Import patches-unapplied version 1:2.14.1-1ubuntu4.1 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 117dd24136e8f7432a1c6405f2d2bb422fbc6e4b

New changelog entries:
  * SECURITY UPDATE: arbitrary code execution via
    submodule names in .gitsubmodules.
    - 0001-submodule-config-verify-submodule-names-as-paths.patch
    - 012-fsck-simplify-.git-check.patch
    - 013-fsck-actually-fsck-blob-data.patch
    - 014-fsck-detect-gitmodules-files.patch
    - 015-fsck-check-.gitmodules-content.patch
    - 016-fsck-call-fsck_finish-after-fscking-objects.patch
    - 017-unpack-objects-call-fsck_finish-after-fscking-object.patch
    - 018-index-pack-check-.gitmodules-files-with-strict.patch
    - CVE-2018-11235 (LP: #1774061)
  * SECURITY UPDATE: out-of-bounds memory access when sanity-checking
    pathnames on NTFS
    - 0002-is_ntfs_dotgit-use-a-size_t-for-traversing-string.patch
    - CVE-2018-11233
  * Do not allow .gitmodules to be a symlink:
    - 003-is_hfs_dotgit-match-other-.git-files.patch
    - 004-is_ntfs_dotgit-match-other-.git-files.patch
    - 005-is_-hfs-ntfs-_dotgitmodules-add-tests.patch
    - 006-skip_prefix-add-case-insensitive-variant.patch
    - 007-verify_path-drop-clever-fallthrough.patch
    - 008-verify_dotfile-mention-case-insensitivity-in-comment.patch
    - 009-update-index-stat-updated-files-earlier.patch
    - 010-verify_path-disallow-symlinks-in-.gitmodules.patch
    - 011-index-pack-make-fsck-error-message-more-specific.patch
    - 019-fsck-complain-when-.gitmodules-is-a-symlink.patch
  * debian/rules: ensure added tests are executable.

Author: Steve Beattie
Author Date: 2018-06-01 05:52:33 UTC

Import patches-applied version 1:2.14.1-1ubuntu4.1 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 5bbc311d7bb7a7f09b78d4f983aff498129e0440
Unapplied parent: afe5778f57483cd77174eb9cc5b74353c5c2052a

New changelog entries:
  * SECURITY UPDATE: arbitrary code execution via
    submodule names in .gitsubmodules.
    - 0001-submodule-config-verify-submodule-names-as-paths.patch
    - 012-fsck-simplify-.git-check.patch
    - 013-fsck-actually-fsck-blob-data.patch
    - 014-fsck-detect-gitmodules-files.patch
    - 015-fsck-check-.gitmodules-content.patch
    - 016-fsck-call-fsck_finish-after-fscking-objects.patch
    - 017-unpack-objects-call-fsck_finish-after-fscking-object.patch
    - 018-index-pack-check-.gitmodules-files-with-strict.patch
    - CVE-2018-11235 (LP: #1774061)
  * SECURITY UPDATE: out-of-bounds memory access when sanity-checking
    pathnames on NTFS
    - 0002-is_ntfs_dotgit-use-a-size_t-for-traversing-string.patch
    - CVE-2018-11233
  * Do not allow .gitmodules to be a symlink:
    - 003-is_hfs_dotgit-match-other-.git-files.patch
    - 004-is_ntfs_dotgit-match-other-.git-files.patch
    - 005-is_-hfs-ntfs-_dotgitmodules-add-tests.patch
    - 006-skip_prefix-add-case-insensitive-variant.patch
    - 007-verify_path-drop-clever-fallthrough.patch
    - 008-verify_dotfile-mention-case-insensitivity-in-comment.patch
    - 009-update-index-stat-updated-files-earlier.patch
    - 010-verify_path-disallow-symlinks-in-.gitmodules.patch
    - 011-index-pack-make-fsck-error-message-more-specific.patch
    - 019-fsck-complain-when-.gitmodules-is-a-symlink.patch
  * debian/rules: ensure added tests are executable.

Author: Steve Beattie
Author Date: 2018-06-01 05:52:33 UTC

Import patches-unapplied version 1:2.14.1-1ubuntu4.1 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 117dd24136e8f7432a1c6405f2d2bb422fbc6e4b

New changelog entries:
  * SECURITY UPDATE: arbitrary code execution via
    submodule names in .gitsubmodules.
    - 0001-submodule-config-verify-submodule-names-as-paths.patch
    - 012-fsck-simplify-.git-check.patch
    - 013-fsck-actually-fsck-blob-data.patch
    - 014-fsck-detect-gitmodules-files.patch
    - 015-fsck-check-.gitmodules-content.patch
    - 016-fsck-call-fsck_finish-after-fscking-objects.patch
    - 017-unpack-objects-call-fsck_finish-after-fscking-object.patch
    - 018-index-pack-check-.gitmodules-files-with-strict.patch
    - CVE-2018-11235 (LP: #1774061)
  * SECURITY UPDATE: out-of-bounds memory access when sanity-checking
    pathnames on NTFS
    - 0002-is_ntfs_dotgit-use-a-size_t-for-traversing-string.patch
    - CVE-2018-11233
  * Do not allow .gitmodules to be a symlink:
    - 003-is_hfs_dotgit-match-other-.git-files.patch
    - 004-is_ntfs_dotgit-match-other-.git-files.patch
    - 005-is_-hfs-ntfs-_dotgitmodules-add-tests.patch
    - 006-skip_prefix-add-case-insensitive-variant.patch
    - 007-verify_path-drop-clever-fallthrough.patch
    - 008-verify_dotfile-mention-case-insensitivity-in-comment.patch
    - 009-update-index-stat-updated-files-earlier.patch
    - 010-verify_path-disallow-symlinks-in-.gitmodules.patch
    - 011-index-pack-make-fsck-error-message-more-specific.patch
    - 019-fsck-complain-when-.gitmodules-is-a-symlink.patch
  * debian/rules: ensure added tests are executable.

Author: Steve Beattie
Author Date: 2018-06-01 05:52:33 UTC

Import patches-applied version 1:2.14.1-1ubuntu4.1 to applied/ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 5bbc311d7bb7a7f09b78d4f983aff498129e0440
Unapplied parent: afe5778f57483cd77174eb9cc5b74353c5c2052a

New changelog entries:
  * SECURITY UPDATE: arbitrary code execution via
    submodule names in .gitsubmodules.
    - 0001-submodule-config-verify-submodule-names-as-paths.patch
    - 012-fsck-simplify-.git-check.patch
    - 013-fsck-actually-fsck-blob-data.patch
    - 014-fsck-detect-gitmodules-files.patch
    - 015-fsck-check-.gitmodules-content.patch
    - 016-fsck-call-fsck_finish-after-fscking-objects.patch
    - 017-unpack-objects-call-fsck_finish-after-fscking-object.patch
    - 018-index-pack-check-.gitmodules-files-with-strict.patch
    - CVE-2018-11235 (LP: #1774061)
  * SECURITY UPDATE: out-of-bounds memory access when sanity-checking
    pathnames on NTFS
    - 0002-is_ntfs_dotgit-use-a-size_t-for-traversing-string.patch
    - CVE-2018-11233
  * Do not allow .gitmodules to be a symlink:
    - 003-is_hfs_dotgit-match-other-.git-files.patch
    - 004-is_ntfs_dotgit-match-other-.git-files.patch
    - 005-is_-hfs-ntfs-_dotgitmodules-add-tests.patch
    - 006-skip_prefix-add-case-insensitive-variant.patch
    - 007-verify_path-drop-clever-fallthrough.patch
    - 008-verify_dotfile-mention-case-insensitivity-in-comment.patch
    - 009-update-index-stat-updated-files-earlier.patch
    - 010-verify_path-disallow-symlinks-in-.gitmodules.patch
    - 011-index-pack-make-fsck-error-message-more-specific.patch
    - 019-fsck-complain-when-.gitmodules-is-a-symlink.patch
  * debian/rules: ensure added tests are executable.

Author: Steve Beattie
Author Date: 2018-06-01 05:52:33 UTC

Import patches-unapplied version 1:2.14.1-1ubuntu4.1 to ubuntu/artful-security

Imported using git-ubuntu import.

Changelog parent: 117dd24136e8f7432a1c6405f2d2bb422fbc6e4b

New changelog entries:
  * SECURITY UPDATE: arbitrary code execution via
    submodule names in .gitsubmodules.
    - 0001-submodule-config-verify-submodule-names-as-paths.patch
    - 012-fsck-simplify-.git-check.patch
    - 013-fsck-actually-fsck-blob-data.patch
    - 014-fsck-detect-gitmodules-files.patch
    - 015-fsck-check-.gitmodules-content.patch
    - 016-fsck-call-fsck_finish-after-fscking-objects.patch
    - 017-unpack-objects-call-fsck_finish-after-fscking-object.patch
    - 018-index-pack-check-.gitmodules-files-with-strict.patch
    - CVE-2018-11235 (LP: #1774061)
  * SECURITY UPDATE: out-of-bounds memory access when sanity-checking
    pathnames on NTFS
    - 0002-is_ntfs_dotgit-use-a-size_t-for-traversing-string.patch
    - CVE-2018-11233
  * Do not allow .gitmodules to be a symlink:
    - 003-is_hfs_dotgit-match-other-.git-files.patch
    - 004-is_ntfs_dotgit-match-other-.git-files.patch
    - 005-is_-hfs-ntfs-_dotgitmodules-add-tests.patch
    - 006-skip_prefix-add-case-insensitive-variant.patch
    - 007-verify_path-drop-clever-fallthrough.patch
    - 008-verify_dotfile-mention-case-insensitivity-in-comment.patch
    - 009-update-index-stat-updated-files-earlier.patch
    - 010-verify_path-disallow-symlinks-in-.gitmodules.patch
    - 011-index-pack-make-fsck-error-message-more-specific.patch
    - 019-fsck-complain-when-.gitmodules-is-a-symlink.patch
  * debian/rules: ensure added tests are executable.

Author: Matthias Klose
Author Date: 2018-04-06 14:38:28 UTC

Import patches-applied version 1:2.17.0-1ubuntu1 to applied/ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c67e3a6e49472cd4002f13206ec4468a3b005f79
Unapplied parent: 60ebb654697f89fa4ee325f4b0169088a203decb

New changelog entries:
  * Merge with Debian; remaining changes:
    - debian/control: build against pcre v3 only
    - debian/rules: s390x libpcre3 library has JIT disabled, set
      NO_LIBPCRE1_JIT on that arch to stop the build from failing.

Author: Matthias Klose
Author Date: 2018-04-06 14:38:28 UTC

Import patches-unapplied version 1:2.17.0-1ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: c8c1a5c0336dd96aaa4d050df9c02e67c8da699d

New changelog entries:
  * Merge with Debian; remaining changes:
    - debian/control: build against pcre v3 only
    - debian/rules: s390x libpcre3 library has JIT disabled, set
      NO_LIBPCRE1_JIT on that arch to stop the build from failing.

Author: Ubuntu Git Importer
Author Date: 2018-04-06 01:28:25 UTC

pristine-tar data for git_2.17.0+next.20180402.orig.tar.gz

Author: Ubuntu Git Importer
Author Date: 2018-03-07 01:35:54 UTC

pristine-tar data for git_2.11.0.orig.tar.xz

Author: Simon Quigley
Author Date: 2017-10-03 18:02:47 UTC

Import patches-applied version 1:2.11.0-2ubuntu0.3 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: dbdf6081cafc91b4936f379a05706f32b2d966a9
Unapplied parent: 876e57cbfcfb05d9fb5b578c4f0ec510611d1825

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Simon Quigley
Author Date: 2017-10-03 18:02:47 UTC

Import patches-applied version 1:2.11.0-2ubuntu0.3 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: dbdf6081cafc91b4936f379a05706f32b2d966a9
Unapplied parent: 876e57cbfcfb05d9fb5b578c4f0ec510611d1825

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Simon Quigley
Author Date: 2017-10-03 18:02:47 UTC

Import patches-applied version 1:2.11.0-2ubuntu0.3 to applied/ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: dbdf6081cafc91b4936f379a05706f32b2d966a9
Unapplied parent: 876e57cbfcfb05d9fb5b578c4f0ec510611d1825

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Simon Quigley
Author Date: 2017-10-03 18:02:47 UTC

Import patches-unapplied version 1:2.11.0-2ubuntu0.3 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: d8e49e138584f2cf8012a68e106dd3c8fe905c77

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Simon Quigley
Author Date: 2017-10-03 18:02:47 UTC

Import patches-unapplied version 1:2.11.0-2ubuntu0.3 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: d8e49e138584f2cf8012a68e106dd3c8fe905c77

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Simon Quigley
Author Date: 2017-10-03 18:02:47 UTC

Import patches-unapplied version 1:2.11.0-2ubuntu0.3 to ubuntu/zesty-security

Imported using git-ubuntu import.

Changelog parent: d8e49e138584f2cf8012a68e106dd3c8fe905c77

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Simon Quigley
Author Date: 2017-09-27 00:11:26 UTC

Import patches-unapplied version 1:2.14.1-1ubuntu4 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: ba3c49d93e6e4712b5e9f8645a19bef82b45fd56

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Simon Quigley
Author Date: 2017-09-27 00:11:26 UTC

Import patches-applied version 1:2.14.1-1ubuntu4 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: cab81072dad7e3029b6d85b1e4132aaf08188a6c
Unapplied parent: 460eb7cad690efd5c0da15dc2addc78d2b2efcd2

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Simon Quigley
Author Date: 2017-09-27 00:11:26 UTC

Import patches-applied version 1:2.14.1-1ubuntu4 to applied/ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: cab81072dad7e3029b6d85b1e4132aaf08188a6c
Unapplied parent: 460eb7cad690efd5c0da15dc2addc78d2b2efcd2

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Simon Quigley
Author Date: 2017-09-27 00:11:26 UTC

Import patches-unapplied version 1:2.14.1-1ubuntu4 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: ba3c49d93e6e4712b5e9f8645a19bef82b45fd56

New changelog entries:
  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Author: Marc Deslauriers
Author Date: 2017-05-12 13:29:22 UTC

Import patches-applied version 1:2.9.3-1ubuntu0.1 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 89bd02e59d11661ed11d3c09e71e33060f7403d4
Unapplied parent: 49a0254876fed80cfafe439ddc59de016679b24f

New changelog entries:
  * SECURITY UPDATE: git shell restriction bypass
    - debian/patches/CVE-2017-8386.patch: disallow repo names beginning
      with dash in shell.c.
    - CVE-2017-8386

Author: Marc Deslauriers
Author Date: 2017-05-12 13:29:22 UTC

Import patches-applied version 1:2.9.3-1ubuntu0.1 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 89bd02e59d11661ed11d3c09e71e33060f7403d4
Unapplied parent: 49a0254876fed80cfafe439ddc59de016679b24f

New changelog entries:
  * SECURITY UPDATE: git shell restriction bypass
    - debian/patches/CVE-2017-8386.patch: disallow repo names beginning
      with dash in shell.c.
    - CVE-2017-8386

Author: Marc Deslauriers
Author Date: 2017-05-12 13:29:22 UTC

Import patches-applied version 1:2.9.3-1ubuntu0.1 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 89bd02e59d11661ed11d3c09e71e33060f7403d4
Unapplied parent: 49a0254876fed80cfafe439ddc59de016679b24f

New changelog entries:
  * SECURITY UPDATE: git shell restriction bypass
    - debian/patches/CVE-2017-8386.patch: disallow repo names beginning
      with dash in shell.c.
    - CVE-2017-8386

Author: Marc Deslauriers
Author Date: 2017-05-12 13:29:22 UTC

Import patches-unapplied version 1:2.9.3-1ubuntu0.1 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 064efdfcc79127158c8a129c47e5e284467103ce

New changelog entries:
  * SECURITY UPDATE: git shell restriction bypass
    - debian/patches/CVE-2017-8386.patch: disallow repo names beginning
      with dash in shell.c.
    - CVE-2017-8386

Author: Marc Deslauriers
Author Date: 2017-05-12 13:29:22 UTC

Import patches-unapplied version 1:2.9.3-1ubuntu0.1 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 064efdfcc79127158c8a129c47e5e284467103ce

New changelog entries:
  * SECURITY UPDATE: git shell restriction bypass
    - debian/patches/CVE-2017-8386.patch: disallow repo names beginning
      with dash in shell.c.
    - CVE-2017-8386

Author: Marc Deslauriers
Author Date: 2017-05-12 13:29:22 UTC

Import patches-unapplied version 1:2.9.3-1ubuntu0.1 to ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: 064efdfcc79127158c8a129c47e5e284467103ce

New changelog entries:
  * SECURITY UPDATE: git shell restriction bypass
    - debian/patches/CVE-2017-8386.patch: disallow repo names beginning
      with dash in shell.c.
    - CVE-2017-8386

Author: Jonathan Nieder
Author Date: 2016-12-27 23:17:12 UTC

Import patches-applied version 1:2.11.0-2 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: af5607cd2430d49a60e5c126e9730cdf6c490380
Unapplied parent: effbdc786c339836d64fee943c64c37a9eb6558a

New changelog entries:
  * gitweb: Depends: libcgi-pm-perl; Build-Depends: libcgi-pm-perl
    (thx Mikko Rasa; closes: #847961).

Author: Jonathan Nieder
Author Date: 2016-12-27 23:17:12 UTC

Import patches-applied version 1:2.11.0-2 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: af5607cd2430d49a60e5c126e9730cdf6c490380
Unapplied parent: effbdc786c339836d64fee943c64c37a9eb6558a

New changelog entries:
  * gitweb: Depends: libcgi-pm-perl; Build-Depends: libcgi-pm-perl
    (thx Mikko Rasa; closes: #847961).

Author: Jonathan Nieder
Author Date: 2016-12-27 23:17:12 UTC

Import patches-unapplied version 1:2.11.0-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: afd93da7cbed750da879d61ca15e8f87c80ad198

New changelog entries:
  * gitweb: Depends: libcgi-pm-perl; Build-Depends: libcgi-pm-perl
    (thx Mikko Rasa; closes: #847961).

Author: Jonathan Nieder
Author Date: 2016-12-27 23:17:12 UTC

Import patches-unapplied version 1:2.11.0-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: afd93da7cbed750da879d61ca15e8f87c80ad198

New changelog entries:
  * gitweb: Depends: libcgi-pm-perl; Build-Depends: libcgi-pm-perl
    (thx Mikko Rasa; closes: #847961).

Author: Anders Kaseorg
Author Date: 2016-08-16 20:32:47 UTC

Import patches-applied version 1:2.9.3-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 5ebb44fddda76affe7355a41f8f6659a831442e6
Unapplied parent: 064efdfcc79127158c8a129c47e5e284467103ce

New changelog entries:
  * New upstream release (see RelNotes/2.8.2.txt, RelNotes/2.8.3.txt,
    RelNotes/2.9.0.txt, RelNotes/2.9.1.txt, RelNotes/2.9.2.txt,
    RelNotes/2.9.3.txt).

Author: Anders Kaseorg
Author Date: 2016-08-16 20:32:47 UTC

Import patches-applied version 1:2.9.3-1 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 5ebb44fddda76affe7355a41f8f6659a831442e6
Unapplied parent: 064efdfcc79127158c8a129c47e5e284467103ce

New changelog entries:
  * New upstream release (see RelNotes/2.8.2.txt, RelNotes/2.8.3.txt,
    RelNotes/2.9.0.txt, RelNotes/2.9.1.txt, RelNotes/2.9.2.txt,
    RelNotes/2.9.3.txt).

Author: Anders Kaseorg
Author Date: 2016-08-16 20:32:47 UTC

Import patches-unapplied version 1:2.9.3-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 661f488a7f24402d1a41a0bde682f61d839cdba0

New changelog entries:
  * New upstream release (see RelNotes/2.8.2.txt, RelNotes/2.8.3.txt,
    RelNotes/2.9.0.txt, RelNotes/2.9.1.txt, RelNotes/2.9.2.txt,
    RelNotes/2.9.3.txt).

Author: Anders Kaseorg
Author Date: 2016-08-16 20:32:47 UTC

Import patches-unapplied version 1:2.9.3-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 661f488a7f24402d1a41a0bde682f61d839cdba0

New changelog entries:
  * New upstream release (see RelNotes/2.8.2.txt, RelNotes/2.8.3.txt,
    RelNotes/2.9.0.txt, RelNotes/2.9.1.txt, RelNotes/2.9.2.txt,
    RelNotes/2.9.3.txt).

Author: Salvatore Bonaccorso
Author Date: 2016-03-17 20:48:34 UTC

Import patches-unapplied version 1:1.7.10.4-1+wheezy3 to debian/wheezy

Imported using git-ubuntu import.

Changelog parent: 225e755d6885d800c2f61339c3e1ad1c5ec15a7c

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Fix remote code execution via buffer overflows (CVE-2016-2315,
    CVE-2016-2324) (Closes: #818318)
  * Non-maintainer upload by the Security Team.
  * Fix CVE-2015-7545, arbitrary code execution issues via URLs with:
    - 0016-CVE-2015-7545-backport1.patch: add function
      string_list_append_nodup()
    - 0017-CVE-2015-7545-backport2.patch: add two new functions for splitting
      strings
    - 0018-CVE-2015-7545-1.patch: add a protocol-whitelist environment
      variable
    - 0019-CVE-2015-7545-2.patch: allow only certain protocols for submodule
      fetches
    - 0020-CVE-2015-7545-3.patch: refactor protocol whitelist code
    - 0021-CVE-2015-7545-4.patch: limit redirection to protocol-whitelist
    - 0022-CVE-2015-7545-5.patch: limit redirection depth
  * Make new tests executable.

Author: Salvatore Bonaccorso
Author Date: 2016-03-17 20:48:34 UTC

Import patches-applied version 1:1.7.10.4-1+wheezy3 to applied/debian/wheezy

Imported using git-ubuntu import.

Changelog parent: 93b66baf19a8bf06b267627c86341ed9e2d24836
Unapplied parent: 9bd425a9862038659e0434212c9afbdf94dc80d5

New changelog entries:
  * Non-maintainer upload by the Security Team.
  * Fix remote code execution via buffer overflows (CVE-2016-2315,
    CVE-2016-2324) (Closes: #818318)
  * Non-maintainer upload by the Security Team.
  * Fix CVE-2015-7545, arbitrary code execution issues via URLs with:
    - 0016-CVE-2015-7545-backport1.patch: add function
      string_list_append_nodup()
    - 0017-CVE-2015-7545-backport2.patch: add two new functions for splitting
      strings
    - 0018-CVE-2015-7545-1.patch: add a protocol-whitelist environment
      variable
    - 0019-CVE-2015-7545-2.patch: allow only certain protocols for submodule
      fetches
    - 0020-CVE-2015-7545-3.patch: refactor protocol whitelist code
    - 0021-CVE-2015-7545-4.patch: limit redirection to protocol-whitelist
    - 0022-CVE-2015-7545-5.patch: limit redirection depth
  * Make new tests executable.

Author: Tyler Hicks
Author Date: 2016-03-22 23:32:49 UTC

Import patches-applied version 1:2.7.4-0ubuntu1 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 24cbe501ad41c9b2f3e3eb1cb9b668e322fdb2b7
Unapplied parent: 942d816d21674e3c383a7bf9cb73a4c90e0ad5dd

New changelog entries:
  * SECURITY UPDATE: New upstream release to fix denial of service or possible
    remote code execution (LP: #1557787)
    + CVE-2016-2324
    + The previous upload only fixed one of the two security issues and 2.7.4
      is needed to address the second

Author: Tyler Hicks
Author Date: 2016-03-22 23:32:49 UTC

Import patches-applied version 1:2.7.4-0ubuntu1 to applied/ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 24cbe501ad41c9b2f3e3eb1cb9b668e322fdb2b7
Unapplied parent: 942d816d21674e3c383a7bf9cb73a4c90e0ad5dd

New changelog entries:
  * SECURITY UPDATE: New upstream release to fix denial of service or possible
    remote code execution (LP: #1557787)
    + CVE-2016-2324
    + The previous upload only fixed one of the two security issues and 2.7.4
      is needed to address the second

Author: Tyler Hicks
Author Date: 2016-03-22 23:32:49 UTC

Import patches-unapplied version 1:2.7.4-0ubuntu1 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 96055a559abe4750a3ed5732a5c72c0ddd62d7c9

New changelog entries:
  * SECURITY UPDATE: New upstream release to fix denial of service or possible
    remote code execution (LP: #1557787)
    + CVE-2016-2324
    + The previous upload only fixed one of the two security issues and 2.7.4
      is needed to address the second

Author: Tyler Hicks
Author Date: 2016-03-22 23:32:49 UTC

Import patches-unapplied version 1:2.7.4-0ubuntu1 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 96055a559abe4750a3ed5732a5c72c0ddd62d7c9

New changelog entries:
  * SECURITY UPDATE: New upstream release to fix denial of service or possible
    remote code execution (LP: #1557787)
    + CVE-2016-2324
    + The previous upload only fixed one of the two security issues and 2.7.4
      is needed to address the second

Author: Tyler Hicks
Author Date: 2016-03-21 14:44:42 UTC

Import patches-unapplied version 1:1.7.9.5-1ubuntu0.3 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: cf8e9c2985de3b930a8bb1e6de11ef2fbefeffd7

New changelog entries:
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution (LP: #1557787)
    - debian/diff/0023-CVE-2016-2315.patch: Be explicit about the amount of
      memory being copied
    - CVE-2016-2315
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution
    - debian/diff/0024-CVE-2016-2324.patch: Use the correct type and maximum
      size checks when calculating string lengths to prevent integer overflow
    - CVE-2016-2324

Author: Tyler Hicks
Author Date: 2016-03-21 14:44:42 UTC

Import patches-applied version 1:1.7.9.5-1ubuntu0.3 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: d858d857d741be1a0602ee03218bdad70cd11dde
Unapplied parent: af10d527a612807c9c109bfe0b61c303a216c614

New changelog entries:
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution (LP: #1557787)
    - debian/diff/0023-CVE-2016-2315.patch: Be explicit about the amount of
      memory being copied
    - CVE-2016-2315
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution
    - debian/diff/0024-CVE-2016-2324.patch: Use the correct type and maximum
      size checks when calculating string lengths to prevent integer overflow
    - CVE-2016-2324

Author: Tyler Hicks
Author Date: 2016-03-21 14:44:42 UTC

Import patches-unapplied version 1:1.7.9.5-1ubuntu0.3 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: cf8e9c2985de3b930a8bb1e6de11ef2fbefeffd7

New changelog entries:
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution (LP: #1557787)
    - debian/diff/0023-CVE-2016-2315.patch: Be explicit about the amount of
      memory being copied
    - CVE-2016-2315
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution
    - debian/diff/0024-CVE-2016-2324.patch: Use the correct type and maximum
      size checks when calculating string lengths to prevent integer overflow
    - CVE-2016-2324

Author: Tyler Hicks
Author Date: 2016-03-21 14:44:42 UTC

Import patches-applied version 1:1.7.9.5-1ubuntu0.3 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: d858d857d741be1a0602ee03218bdad70cd11dde
Unapplied parent: af10d527a612807c9c109bfe0b61c303a216c614

New changelog entries:
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution (LP: #1557787)
    - debian/diff/0023-CVE-2016-2315.patch: Be explicit about the amount of
      memory being copied
    - CVE-2016-2315
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution
    - debian/diff/0024-CVE-2016-2324.patch: Use the correct type and maximum
      size checks when calculating string lengths to prevent integer overflow
    - CVE-2016-2324

Author: Tyler Hicks
Author Date: 2016-03-21 14:44:42 UTC

Import patches-applied version 1:1.7.9.5-1ubuntu0.3 to applied/ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: d858d857d741be1a0602ee03218bdad70cd11dde
Unapplied parent: af10d527a612807c9c109bfe0b61c303a216c614

New changelog entries:
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution (LP: #1557787)
    - debian/diff/0023-CVE-2016-2315.patch: Be explicit about the amount of
      memory being copied
    - CVE-2016-2315
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution
    - debian/diff/0024-CVE-2016-2324.patch: Use the correct type and maximum
      size checks when calculating string lengths to prevent integer overflow
    - CVE-2016-2324

Author: Tyler Hicks
Author Date: 2016-03-21 14:44:42 UTC

Import patches-unapplied version 1:1.7.9.5-1ubuntu0.3 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: cf8e9c2985de3b930a8bb1e6de11ef2fbefeffd7

New changelog entries:
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution (LP: #1557787)
    - debian/diff/0023-CVE-2016-2315.patch: Be explicit about the amount of
      memory being copied
    - CVE-2016-2315
  * SECURITY UPDATE: Fix denial of service or possible arbitrary remote code
    execution
    - debian/diff/0024-CVE-2016-2324.patch: Use the correct type and maximum
      size checks when calculating string lengths to prevent integer overflow
    - CVE-2016-2324