[Bug 1563336] Re: [Ffe] Sync git 1:2.8.0~rc3-1 (main) from Debian unstable (main)

[LocutusOfBorg]

here the changes since 2.7
https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.8.0.txt

I think it is safe to sync, the new features are confined to new
commands implemented, the other stuff is bug fixing, performances
imporvement.

e.g. parallel fetch of git submodules is something that is *really* nice
to have :)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to git in Ubuntu.
https://bugs.launchpad.net/bugs/1563336

Title:
  [Ffe] Sync git 1:2.8.0~rc3-1 (main) from Debian unstable (main)

Status in git package in Ubuntu:
  New

Bug description:
  Please sync git 1:2.8.0~rc3-1 (main) from Debian unstable (main)

  Explanation of the Ubuntu delta and why it can be dropped:
    * SECURITY UPDATE: New upstream release to fix denial of service or possible
      remote code execution (LP: #1557787)
      + CVE-2016-2324
      + The previous upload only fixed one of the two security issues and 2.7.4
        is needed to address the second
    * New upstream release, with critical security bugfixes (LP: #1557787)

  Included in new release.

  Changelog entries since current xenial version 1:2.7.4-0ubuntu1:

  git (1:2.8.0~rc3-1) unstable; urgency=medium

    * new upstream release candidate (see RelNotes/2.8.0.txt).
      * harden against on-stack and on-heap buffer overflows (CVE-2016-2324,
        CVE-2016-2315; closes: #818318).
    * debian/git.docs: update for README -> README.md renaming.

   -- Jonathan Nieder <jrnieder at gmail.com>  Wed, 16 Mar 2016 18:28:12
  -0700

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/git/+bug/1563336/+subscriptions