4 ms·

I'm not sure why they aren't bumping the patch number, maybe they decided against applying the other parts of the patch for least change - but at least the CVEs

by tomxor 4y ago

I'm not sure why they aren't bumping the patch number, maybe they decided against applying the other parts of the patch for least change - but at least the CVEs are mentioned in all of the Ubuntu changelogs. I can't find anything in the Debian changelogs referring to the CVEs. Yet the Ubuntu changelog refers to it as a debian patch... Anyone know anything about Debian?

deleted 4y ago
[deleted]
foresto 4y ago
Looks like it's tracked in Debian, but not addressed yet. https://security-tracker.debian.org/tracker/CVE-2022-23521 https://security-tracker.debian.org/tracker/CVE-2022-23521 https://security-tracker.debian.org/tracker/CVE-2022-41903 https://security-tracker.debian.org/tracker/CVE-2022-41903 https://www.debian.org/security/2023/ https://www.debian.org/security/2023/ https://tracker.debian.org/pkg/git https://tracker.debian.org/pkg/git
- tomxor 4y ago
  Thank you!