new: {} removed: {} changed: ['distro-info-data', 'git', 'git-man'] new snaps: {} removed snaps: {} changed snaps: ['core22', 'snapd'] ==== distro-info-data: 0.54ubuntu0.2 => 0.54ubuntu0.3 ==== ==== distro-info-data * Add Ubuntu 23.10 Mantic Minotaur. (LP: #2018028) * Add Debian 14 "forky" with a vague creation date. * Set the planned release date for Debian bookworm (and an EoL based on it). * Adjust trixie's creation date to match bookworm's release. ==== git: 1:2.37.2-1ubuntu1.4 => 1:2.37.2-1ubuntu1.5 ==== ==== git git-man * SECURITY UPDATE: Overwriting path - debian/patches/CVE-2023-25652_25815_29007/0022-*.patch: apply --reject overwriting existing .rej symlink if it exists in apply.c, t/t4115-apply-symlink.sh. - CVE-2023-25652 * SECURITY UPDATE: Malicious placement of crafted messages - debian/patches/CVE-2023-25652_25815_29007/0024-*patch: avoid using gettext if the locale dir is not present in gettext.c. - CVE-2023-25815 * SECURITY UPDATE: Arbitrary configuration injection - debian/patches/CVE-2023-25652_25815_29007/0025-*.patch: avoid fixed-sized buffer when renaming/deleting a section in config.c, t/t1300-config.sh. - debian/patches/CVE-2023-25652_25815_29007/0026-*.patch: avoid integer truncation in copy_or_rename_section_in_file() in config.c. - debian/patches/CVE-2023-25652_25815_29007/0027-*.patch: disallow overly-long lines in copy_or_rename_section_in_file in config.c. - CVE-2023-29007