kpriv
/
pkgsrc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

libgit2: updated to 1.7.2 

v1.7.2
------

What's Changed

This release fixes three bugs that can cause undefined behavior when given well-crafted inputs, either in input files or over network connections. These bugs may be able to be leveraged to cause denial of service attacks or unauthorized code execution.

Two of these issues were discovered and reported by security engineers at Amazon Web Services. We thank the AWS Security team for their efforts to identify these issues, provide helpful reproduction cases, and responsibly disclose their findings.

Security fixes

* transport: safely handle messages with no caps
* revparse: fix parsing bug for trailing `@`
* index: correct index has_dir_name check
This commit is contained in:
adam 2024-02-07 13:22:04 +00:00
parent f9943d0f9e
commit 0500b87c6a
2 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
devel/libgit2/Makefile
View File

@ -1,7 +1,6 @@
# $NetBSD: Makefile,v 1.74 2023/12/14 11:29:19 wiz Exp $
# $NetBSD: Makefile,v 1.75 2024/02/07 13:22:04 adam Exp $
DISTNAME= libgit2-1.7.1
PKGREVISION= 2
DISTNAME= libgit2-1.7.2
CATEGORIES= devel
MASTER_SITES= ${MASTER_SITE_GITHUB:=libgit2/}
GITHUB_TAG= v${PKGVERSION_NOREV}

8
devel/libgit2/distinfo
View File

@ -1,8 +1,8 @@
$NetBSD: distinfo,v 1.35 2023/10/19 07:19:44 wiz Exp $
$NetBSD: distinfo,v 1.36 2024/02/07 13:22:04 adam Exp $
BLAKE2s (libgit2-1.7.1.tar.gz) = de2c63dc558a68962f169f7300c9884a2486d6bbb1c29c513194ad147c48a033
SHA512 (libgit2-1.7.1.tar.gz) = 08e60dde0cdf57006cf0c5f27a82220aba8d701bf7d6d709ffe312975ffa5dbef009ccb1e7cbe570b9502f4361d06ace44dbfd9a5f5f8ad08e9b0ca05bef765e
Size (libgit2-1.7.1.tar.gz) = 7548081 bytes
BLAKE2s (libgit2-1.7.2.tar.gz) = 51be87fe3dd22b785873c4089c11d33e148814ef0d361fd9020f49b86590d2c4
SHA512 (libgit2-1.7.2.tar.gz) = 825737e4a1991fba50ea535f15b0e560ebe76ead752e04aeba36925b944d0da77fe9826a70980a1aa3d0bf9afbedfab79dd92e799c9252931384c89ebec9b012
Size (libgit2-1.7.2.tar.gz) = 7548186 bytes
SHA1 (patch-deps_ntlmclient_ntlm.c) = 0f7645497b25f6895911cf32027e830ab73bdc55
SHA1 (patch-src_libgit2_config.c) = f3c131d26bb38e86ff992eb8007ec399846a205a
SHA1 (patch-src_libgit2_path.c) = b1f5245472ec00ff1c1c6b55b4ecdc88e1f163ac