Back to libgit2 PTS page

Accepted libgit2 0.25.1+really0.24.6-1+deb9u1 (source) into oldoldstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 07 Mar 2022 04:46:14 +0530
Source: libgit2
Architecture: source
Version: 0.25.1+really0.24.6-1+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: Russell Sim <russell.sim@gmail.com>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
 libgit2 (0.25.1+really0.24.6-1+deb9u1) stretch-security; urgency=high
 .
   * Non-maintainer upload by the LTS team.
   * Add patch to fix potential OOB-read when processing
     ng packet. (Fixes: CVE-2018-15501)
   * Add patch to fix out-of-bounds read of delta.
     (Fixes: CVE-2018-10888)
   * Add patch to fix sign-extension of big left-shift.
     (Fixes: CVE-2018-10887)
   * Add patch to convert read_entry to return entry size
     via an out-param. (Fixes: CVE-2018-8099)
   * Add patch to disallow NTFS Alternate Data Stream attacks,
     even on Linux/macOS. (Fixes: CVE-2020-12278)
   * Add patch to protect against 8.3 "short name" attacks
     also on Linux/macOS. (Fixes: CVE-2020-12279)
Checksums-Sha1:
 7db89b7e3d93219990b80c5dafe911753b44acb6 2168 libgit2_0.25.1+really0.24.6-1+deb9u1.dsc
 259d7ccdf716b273f239810bdd567195c3e02d0d 4178476 libgit2_0.25.1+really0.24.6.orig.tar.gz
 ad58427c28ff5aa5e71bcae783653b28e490b033 18548 libgit2_0.25.1+really0.24.6-1+deb9u1.debian.tar.xz
 0222a6a8d4933f9a6db0287d58c9822010914a9a 6190 libgit2_0.25.1+really0.24.6-1+deb9u1_source.buildinfo
Checksums-Sha256:
 90c8c7a1810b93e2cb6544f86157f48974eb98dd3ca03fb0996f22033d01529c 2168 libgit2_0.25.1+really0.24.6-1+deb9u1.dsc
 7b441a96967ff525e790f8b66859faba5c6be4c347124011f536ae9075ebc30c 4178476 libgit2_0.25.1+really0.24.6.orig.tar.gz
 f4d9f3e62f55daf141b2e15adb35ff278da8ca59567dcf6e7b6f60fad02723b0 18548 libgit2_0.25.1+really0.24.6-1+deb9u1.debian.tar.xz
 f0f620fcbb19b06869611e5d66d163de4dc53f2522128b508ae101b1740eeb18 6190 libgit2_0.25.1+really0.24.6-1+deb9u1_source.buildinfo
Files:
 c8f797d05904da5727d903e19b65fd95 2168 libs extra libgit2_0.25.1+really0.24.6-1+deb9u1.dsc
 cbdf07ec58f63fd01a48d1a6f7b9c37d 4178476 libs extra libgit2_0.25.1+really0.24.6.orig.tar.gz
 c79f572ad6cd2da574f9cc1bed67f726 18548 libs extra libgit2_0.25.1+really0.24.6-1+deb9u1.debian.tar.xz
 5c58b07bcabd7157e75aa9501d524c7d 6190 libs extra libgit2_0.25.1+really0.24.6-1+deb9u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=o6Nt
-----END PGP SIGNATURE-----