That Debian advisory is a different, older vulnerability. Looks like they know about it but haven't released anything yet: https://security-tracker.debian.org/

That Debian advisory is a different, older vulnerability. Looks like they know about it but haven't released anything yet: https://security-tracker.debian.org/tracker/source-package/git https://security-tracker.debian.org/tracker/source-package/g...