-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Feb 2024 18:22:27 +0100 Source: libgit2 Binary: libgit2-1.1 libgit2-1.1-dbgsym libgit2-dev Architecture: amd64 Version: 1.1.0+dfsg.1-4+deb11u2 Distribution: bullseye-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Timo Röhling Description: libgit2-1.1 - low-level Git library libgit2-dev - low-level Git library (development files) Closes: 1063416 Changes: libgit2 (1.1.0+dfsg.1-4+deb11u2) bullseye-security; urgency=medium . * Team upload. * Fix CVE-2024-24577: Use-after-free in git_index_add (Closes: #1063416) Checksums-Sha1: d5fb2faa9aa2d1296470223275234c995971a5c3 1484904 libgit2-1.1-dbgsym_1.1.0+dfsg.1-4+deb11u2_amd64.deb b917ad4c7728255e8c6a03a60faf4707ba2ed03f 444712 libgit2-1.1_1.1.0+dfsg.1-4+deb11u2_amd64.deb b7a96cd6e107341b6d042e79f181a3bb6cd63788 739984 libgit2-dev_1.1.0+dfsg.1-4+deb11u2_amd64.deb c1db1c27ed6d2238ac2e6505e4f76260f286b828 8261 libgit2_1.1.0+dfsg.1-4+deb11u2_amd64-buildd.buildinfo Checksums-Sha256: 79cb26c5bdee3e31499ee0af71a3cc01a7d1b5b7c570effc56c14b6948c75b00 1484904 libgit2-1.1-dbgsym_1.1.0+dfsg.1-4+deb11u2_amd64.deb 632664b066480aecc38cf43e688a01c648d75969d33bd3a1434b1fc777c64651 444712 libgit2-1.1_1.1.0+dfsg.1-4+deb11u2_amd64.deb 2c1740a43048d0e44c27c13c61bf8c6b82c2a0edd744d4914da9a947a01ada4b 739984 libgit2-dev_1.1.0+dfsg.1-4+deb11u2_amd64.deb d0f481c674386f7212c5d80ab335e836a8665f1bb25efcbe9390eabffaad1a2c 8261 libgit2_1.1.0+dfsg.1-4+deb11u2_amd64-buildd.buildinfo Files: 7864e8f61a9a6b96a497eadc7c191a18 1484904 debug optional libgit2-1.1-dbgsym_1.1.0+dfsg.1-4+deb11u2_amd64.deb 4461a1aa5b572e2fa45aa404f828e8f4 444712 libs optional libgit2-1.1_1.1.0+dfsg.1-4+deb11u2_amd64.deb 497a0e128e23a549742dfbdcc1152029 739984 libdevel optional libgit2-dev_1.1.0+dfsg.1-4+deb11u2_amd64.deb 31fa3f7b3787b88d37e9692ff9658f7b 8261 libs optional libgit2_1.1.0+dfsg.1-4+deb11u2_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE85oDfSLnwLkvY4Ibj5YjFeDZ0JMFAmXFNRoACgkQj5YjFeDZ 0JMBIg//S6cVw04lfaPJJZFsl4/AeOvxH7t8vfFVmtoXutlTr5gOqLBAStSkS8o2 x5o2Kf+fEZ0a+ckxUhMYeX/bsJ17cWZE4II8HGQU7irrpngH65IDIsbD8AHelnoy 9lBaNxf7/T8XqPdOi0qD5i2otMHJx+p022gGKS221Bze0+H0GOpldK6j0I4H+/1W GzoRHPqD8N4uotvd2fEqts2B1FJfPBlRrVMPkaFEUIiVNyEq/nGF21zsFZDFMYm4 dethjKX8zFASs3Y/8wvgrx+9sT1wx2ZdxECge/BvrhxmxTA6veOasfCHSNo4zT79 VPLkXxUJ4HNdDhl+z6wmrad6IBz9Ckub4e1K3iudgG74rummOHRheReX9NRCTKGy LIfgicY1ry+ldSU+lbSLnCk6NpbKT9Jyhp1gyOUWWfUzHlJ3a+kVGQnbidgYLLwo 7TuOWJ3z7iUttGDB7O9DJ1YHQ7tV1b31aCHy/EL+GeXKX68zoKCuQHPKzrFtVGk5 r3QLR/MZhnmwzZi72ZaNYse0/9lc1Lgwqi7GOee+fHwAc+lRUeTYxqwtraoQvRm6 Al/uDDDNqWsjBYkKuebln/Kna7F7Q7V/ihARwRIUAoBEvu5fvwqe7Ut7BZHVyKNM 5/fhSM/FZf+jTXo1kkmdGekxFpfGxVkuHytRZRF0xqXvBDQpWbM= =TTsw -----END PGP SIGNATURE-----