I'm not sure why they aren't bumping the patch number, maybe they decided agains... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tomxor on Jan 17, 2023 \| parent \| context \| favorite \| on: Git security vulnerabilities announced I'm not sure why they aren't bumping the patch number, maybe they decided against applying the other parts of the patch for least change - but at least the CVEs are mentioned in all of the Ubuntu changelogs. I can't find anything in the Debian changelogs referring to the CVEs. Yet the Ubuntu changelog refers to it as a debian patch... Anyone know anything about Debian?

foresto on Jan 18, 2023 | [–]

Looks like it's tracked in Debian, but not addressed yet.

https://security-tracker.debian.org/tracker/CVE-2022-23521

https://security-tracker.debian.org/tracker/CVE-2022-41903

https://www.debian.org/security/2023/

https://tracker.debian.org/pkg/git

tomxor on Jan 18, 2023 | | [–]

Thank you!

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact