-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Feb 2024 12:31:43 +0100 Source: libgit2 Binary: libgit2-1.5 libgit2-1.5-dbgsym libgit2-dev Architecture: s390x Version: 1.5.1+ds-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Timo Röhling Description: libgit2-1.5 - low-level Git library libgit2-dev - low-level Git library (development files) Closes: 1063415 1063416 Changes: libgit2 (1.5.1+ds-1+deb12u1) bookworm-security; urgency=high . * Team upload. * Fix CVE-2024-24575: Denial of service attack in git_revparse_single (Closes: #1063415) * Fix CVE-2024-24577: Use-after-free in git_index_add (Closes: #1063416) Checksums-Sha1: 62b6c105b6dbd001d19bfb8c646ce23b635889b2 1642676 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_s390x.deb 11cf8f624702715032b1b08f8d3d8b756a2364ee 455536 libgit2-1.5_1.5.1+ds-1+deb12u1_s390x.deb 6ff8fb59deddf3e00dbec9a54b22467ad5291e38 736052 libgit2-dev_1.5.1+ds-1+deb12u1_s390x.deb 586cb057de4d6ff4bb17ac50e3fc6c76cec0358c 8018 libgit2_1.5.1+ds-1+deb12u1_s390x-buildd.buildinfo Checksums-Sha256: 82b5a121f5716a6857f0ab42403005958593fbad71c0a37b146aeac95012537d 1642676 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_s390x.deb a570194e396b8fc6d853f18dac5f8b07e8af94713b7ba156921615476535a53f 455536 libgit2-1.5_1.5.1+ds-1+deb12u1_s390x.deb d99fc6ea87498ab886de61a6a2c838e847ca115f7fa994f597f85afd5b9fa933 736052 libgit2-dev_1.5.1+ds-1+deb12u1_s390x.deb 4d28e0b474a49006559a5d221db48e51dde4aab8c2a4850d923c2796546bbdd0 8018 libgit2_1.5.1+ds-1+deb12u1_s390x-buildd.buildinfo Files: af6735e96b4ca61260d18b4e6c37aa08 1642676 debug optional libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_s390x.deb 7824fc5a94fc8c24605107540b72072e 455536 libs optional libgit2-1.5_1.5.1+ds-1+deb12u1_s390x.deb 4451ab8b53666e7f4cb167f85591c4a9 736052 libdevel optional libgit2-dev_1.5.1+ds-1+deb12u1_s390x.deb 296ae5754a7ee9ac48dc67bd23a5ca77 8018 libs optional libgit2_1.5.1+ds-1+deb12u1_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEctqRAwcjFMIrbct74euoNlQ3ywQFAmXFOd4ACgkQ4euoNlQ3 ywR2ag/+OyNN8STb8SSM1PFVf2jiE0gDNj0fNgtF9NXfBGK100KoQGrOQe6qcddO /XNOw5LESIF0c0KcRoHNCniy5L9ZZ0oFyq2IvRQZCAFhbH5Pmbxq3hG4pRWP1bCS VUam3yrq7YQK5REKToMsNqO7kK7xWA0YivmdPGDQVHv0pHEAb+eEAQud2J96MsaL VzdMlLppWVdITPis55hEXcLh4iF4DrYPPeThamd6y4ho30DjE0Z5pey7derK0q9d NbZkN2Bh/kGxKsukojiCIt6KUoKTpeRQfmy3JArWd3Ze6p2VLSFDdhjCkmnAqmU8 WRRXXm8BZ+oUC86cx7DvxYFJqRXy9+E22nv8WUfKp7uZRjpWc7Vv/xXsicXlY1tj J9ES+f+bowRRCNJkmQ2N2c4SJSwB4djwAxln7u/oQ69+xeZvXCRof5TY4Vk/XNYz E1jQI1/zH6hGtM2vfek60BBxa+zT/pE21SaE8hVaBVYsscjuTWSwaH7NxWRviKye 786R4X8DMmWgnuwnZd5tWFPkXTes1JIWF8/gT5KlS6sOz2Qb47DoERHK6IVVqorf 8G10SLWOJARhzWo2giC1weRZCMfiH1/56LPm8IH6uXKI7wfnKJU8iwmfdABK1Aq5 LoolqMM0l6RKpT3qQdgJX1bh9cnFkMo+eKNdPLTnR3lAZ+eCDY8= =3GTD -----END PGP SIGNATURE-----