From: ftpmaster@ftp-master.debian.org 
  
 -----BEGIN PGP SIGNED MESSAGE----- 
 Hash: SHA512 
  
 Format: 1.8 
 Date: Tue, 07 Oct 2025 14:22:08 +0200 
 Source: git 
 Architecture: source 
 Version: 1:2.39.5-0+deb12u3 
 Distribution: bookworm 
 Urgency: medium 
 Maintainer: Jonathan Nieder  
 Changed-By: Lee Garrett  
 Changes: 
  git (1:2.39.5-0+deb12u3) bookworm; urgency=medium 
  . 
    * Non-maintainer upload by the LTS Security Team. 
    * Add debian/gbp.conf 
    * Fix CVE-2025-27613 
    * Fix CVE-2025-46835 
    * Fix CVE-2025-48384 
    * Fix CVE-2025-48385 
 Checksums-Sha1: 
  24b55c5692376eac18ea6d478d2f09ae55279151 3523 git_2.39.5-0+deb12u3.dsc 
  1610a3976fc1aea4fd55094520bcf89798ad6b39 761364 git_2.39.5-0+de 
 12u3.debian.tar.xz 
  4feb01974f92450c992a034554a8ad054366e561 13446 git_2.39.5-0+deb 
 2u3_amd64.buildinfo 
 Checksums-Sha256: 
  183f02891326496b439a24c87843fb8849178b21517640fc703787754aad6bd1 3523 
 git_2.39.5-0+deb12u3.dsc 
  b19cbf9a483a6625d924119ebe99f997acfe83616906d33d2079ca3d7d668d22 761364 
 git_2.39.5-0+deb12u3.debian.tar.xz 
  258919ad427a892df69a4de994b5c128bf79aa5bbee826a8e84c567947c3683b 13446 
 git_2.39.5-0+deb12u3_amd64.buildinfo 
 Files: 
  6b6e72396043bbad6198a841f89b5f74 3523 vcs optional git_2.39.5-0+deb12u3.dsc 
  409d3d23098b3c36d7d0bc3724dfafdf 761364 vcs optional git_2.39.5 
 0+deb12u3.debian.tar.xz 
  8bf42cb8c368bd2f76a36d62b7ff1870 13446 vcs optional git_2.39.5- 
 +deb12u3_amd64.buildinfo 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQQzBAEBCgAdFiEE2EfGJRCpwv8kLOAs1gShxII+4PgFAmjlCYwACgkQ1gShxII+ 
 4PjQOx//ZjJDYHefWyppbjBpy4tCeX2xCbjF/jXFlpETrPmXc/joG+qm4zOKS6OA 
 MyhfqvuAmJ4hVsOS7ZDSAAwb1lhVUNKZW8dHXx/kL8o+SxPFwvWMEtp54e1i2Xmg 
 5W8EBsIfIDmAJkTPsr3D278u7zia44gE+5BXw6wIZLHqfr7WBg2ixec5UDU8TDO4 
 IVa2zTHvQkDdTjNxmNj0dFDtD8xpTDSVBoz6qJsPBMaEPZ5M2geawfGMx4NTgjy3 
 dWVj13T7SwqkJ5+Dd6Es7oxMY7/+4vgsImu3jmWMPxcX0KfgKX65gTdJ2RF+Rt6i 
 4jgmsI4XHVbgznB5io2cVTs4QZxQlKdaXpxz8zu95xEZioZeYdNQ01eTGfiKMbL+ 
 ZZXBE/PCLSoKqS+ztkqqqW1xbD1bC2WgbTf4TvK5VtSj6D1AA6oztNB4KtnvgqWB 
 sUb0ivftmrwu74Vx1oDIUlIugimCaGtpz3meI+NxUrZiVyJ/fdceLhGpdu3hgPkq 
 gPKNj5gQnoWZNuR9qwIMxzPUK45soJr30Q6IEkKgtVGSCK2kEexuyPAdBggQjtRc 
 3b1i6rQ+JyNdTxIHZUFFx8n2OsDJywhmOyB6bWzP3JIda01sTlpwgkjh4EPajA5L 
 p4tyaVtIHEPvoPotCy0/mO2fF8jsLzc+DqsmIbD3azvlofXcPA0i1CFLaflNTP5X 
 YB8GlMCS6jWXMP1h7se//jnh+f9FRBs1U23apopLaBK5SpcVg+415fm4dqWO2/q8 
 di6KmFtuWOWtbVDWilUduC6uSISSfZ/junInOkGFgHbXJKjYnT65Iso7PEDeZj4x 
 hS/ixSvgEIFQt3WeuuHI2Lx0RVvBEN6MZG83cwhWT+5DoHbZDV9ughfvXNK4zilt 
 qEe2gooPHquRI3B1EBbwPvBh/5K+a5eXkN/1gaHipnZbUIm+3jUZ8jgzy9iI+8pP 
 J0HDKsimVA7Ajd6NCR34ZNotmCOQ8hsSdXZjhOXdnT1ag1q3WUN20WEXXi/ggomf 
 IQyS08bfYfpXHIGNPgqC8NSGZbJZfjclt9QbG/00foeHpjW24XvJ1pcrBmlR78Wp 
 3jMoMHv1c6X+Y9+U/xOA2PJtwqq+g9vcIaTpxRVA0XDPergaj2nxUV8o/skFLQRW 
 Jcm+lDxviIxk88I3Kx4I+2HqNLTrgief8H2vuD5pX3l4dx8VKD1USbIUCoo0jRPX 
 ZswRAPYRpBe7y5Ihx/IP+1EVoHWLWLYb0/WH3ED8Dthj72JdVN61YRhCX/CW8s3h 
 kxHcrnNmyJjKLUG2qOSCJSGTN2chZJhmgy0hJGLScB+Ee+yUBcxFVM79UOw75qwW 
 uIwlIIZ1j39nx2tkAih6dah6Ks1wTg== 
 =TIBo 
 -----END PGP SIGNATURE----- 
  
  
 --============== 97311581759505084=Content-Type: application/pgp-signature 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaPT9tgAKCRCb9qggYcy5 
 IcHNAQC4Wcz72jblUOFq8ql2nuYizEUC2E0fdai8GsASM18tvQEAwKk72tHb5y36 
 7KCXzhwmcJkiMv6Sqa1GBw6uyo/6VQo=xLpm 
 -----END PGP SIGNATURE----- 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)