* SECURITY UPDATE: ANSI escape sequence injection via the sideband channel, allowing a malicious remote to corrupt terminal state, hide information, or insert characters into the terminal input buffer during clone, fetch and push (CWE-150) - debian/patches/CVE-2024-52005.patch: add strbuf_add_sanitized() in sideband.c and route the two remote-controlled sideband writes through it, replacing control characters with the conventional ^ notation (^[ for ESC, ^A for 0x01, ^? for DEL) while letting tab and newline through. Also carries upstream's t5409-colorize-remote-messages.sh regression test. - CVE-2024-52005 * debian/rules: skip the git-svn test suite on armel only. Subversion's directory I/O goes through APR, and Debian's armel libapr1 links the non-LFS readdir(), so dirent.d_ino is 32 bit there; when the source tree lives on a filesystem handing out inode numbers >= 2^32 every git-svn test aborts with "svn: E000075: Can't read directory ...: Value too large for defined data type". This is a limitation of the build environment, not a defect in git -- Debian's own armel buildd runs the same tests successfully. All other architectures continue to run the git-svn suite in full.