-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Feb 2024 09:10:45 +0100 Source: libgit2 Architecture: source Version: 1.7.2+ds-1 Distribution: unstable Urgency: medium Maintainer: Utkarsh Gupta <utkarsh@debian.org> Changed-By: Timo Röhling <roehling@debian.org> Closes: 1063415 1063416 Changes: libgit2 (1.7.2+ds-1) unstable; urgency=medium . * New upstream version 1.7.2+ds - Fix CVE-2024-24575: Denial of service in git_revparse_single (Closes: #1063415) - Fix CVE-2024-24577: Use-after-free in git_index_add (Closes: #1063416) * Build-depend on pkgconf instead of pkg-config Checksums-Sha1: d531f7e28c26d5d24e13dff75c098d25fd106be3 2259 libgit2_1.7.2+ds-1.dsc 9328b17923ad703815b23568f9be9b050a50fb74 4245244 libgit2_1.7.2+ds.orig.tar.xz 128505db2797d7e261898d8b65230897aff3da6f 18032 libgit2_1.7.2+ds-1.debian.tar.xz Checksums-Sha256: fad7efd04bdc2f9ea93fb117f1a3c14e2cf882c0748994993bc424af89cf4375 2259 libgit2_1.7.2+ds-1.dsc fe3e524576e624141f9bf00183c25421aa6d8fb3e90a1793a5f4e9a5360f53af 4245244 libgit2_1.7.2+ds.orig.tar.xz fda27230513e4182496e1c374284d260425c7cf044c883f373320eb0e89f9885 18032 libgit2_1.7.2+ds-1.debian.tar.xz Files: 68868beeefcd70cce7b7fd9689c9b376 2259 libs optional libgit2_1.7.2+ds-1.dsc b86cab767fba4c594e0d68cad0e40ebc 4245244 libs optional libgit2_1.7.2+ds.orig.tar.xz f3796a2294c5b2202d8f43977d37e8f1 18032 libs optional libgit2_1.7.2+ds-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQHIBAEBCgAyFiEEJvtDgpxjkjCIVtam+C8H+466LVkFAmXEkL0UHHJvZWhsaW5n QGRlYmlhbi5vcmcACgkQ+C8H+466LVlTPQwAwqjbdsJqgl9rTIUXHaVNgSme50sJ 7JRdIJ+AG40CtIPcdzILqO2cWTPOGIPo+fXJO6YGtMuY8vtHmk4ZljjSAXzjMhvZ 1+DtyyEaZv5hgjYOepFp9ZOHnxVb2uoi3IkO88TrNNLfJnk4jZTqdHQRu7lsMBbc G4SlGnluKUs3tSSs3+ODgEPUkqJVFdH0ZfULichNKL3YOXx693d9tmChNus/erNg xb/C5T/9ufDDAdabzVmStc1l3cRgqZlRGgvjGVktgKI5QSe9CHIrRKvhe6gIOVNo oZlgqRChv4Ba4eIfMlf+318WpCayQFXUCm4ko5li3qIHd2QlLTqmMoQmbr3feYBb P0FD45Eo3LW+z0W45a04rui0tYVkXZ2DtKtYJAgL+heepEYWVpUuCLe5uK5yCbEf 1p6k6Wm/hpYIyR39ZT8m/pokqcDnrjwOLg8YYcY9I7KPJ2dh+OrVQzaQdLGQr+VJ TOre7R6/1fQheFFZSggxSyUXH2SlIjDdCbRN =8N3y -----END PGP SIGNATURE-----