-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Feb 2024 12:31:43 +0100 Source: libgit2 Binary: libgit2-1.5 libgit2-1.5-dbgsym libgit2-dev Architecture: ppc64el Version: 1.5.1+ds-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Timo Röhling Description: libgit2-1.5 - low-level Git library libgit2-dev - low-level Git library (development files) Closes: 1063415 1063416 Changes: libgit2 (1.5.1+ds-1+deb12u1) bookworm-security; urgency=high . * Team upload. * Fix CVE-2024-24575: Denial of service attack in git_revparse_single (Closes: #1063415) * Fix CVE-2024-24577: Use-after-free in git_index_add (Closes: #1063416) Checksums-Sha1: 9afb66c86f29910885162b24508bce77198f42bf 1707564 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_ppc64el.deb f1f36aa4de006e121dc71fcacc7a643f9405c061 554936 libgit2-1.5_1.5.1+ds-1+deb12u1_ppc64el.deb 6bf0fe224be3cc9e7d650a1accc739f04a3e78cb 872044 libgit2-dev_1.5.1+ds-1+deb12u1_ppc64el.deb ddb2c4e42ebf6d1168b13fe1b675d7dfeaf62eb8 8125 libgit2_1.5.1+ds-1+deb12u1_ppc64el-buildd.buildinfo Checksums-Sha256: fa891d0c9584f4168b4e71c5c85f60559fdc1c3fd3e99d485845f557da9391d1 1707564 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_ppc64el.deb 35685899604001c8ad70427fdee2b523e6afa500a3aabc96d0dbd9fc5cf0aaa6 554936 libgit2-1.5_1.5.1+ds-1+deb12u1_ppc64el.deb f67929cac6a53278774d9e1ce660552229e9263cb33c59b6e65cae01cfd8c66a 872044 libgit2-dev_1.5.1+ds-1+deb12u1_ppc64el.deb 37babadeb9fe09d5d6d97c0708cdec75f95bbe5f3e4995df61bd9d631ed1e181 8125 libgit2_1.5.1+ds-1+deb12u1_ppc64el-buildd.buildinfo Files: d43406681f8ab45bbe3bddd4e372e5b6 1707564 debug optional libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_ppc64el.deb 225747a97db359e5323b23d048915336 554936 libs optional libgit2-1.5_1.5.1+ds-1+deb12u1_ppc64el.deb 3e59137e8f44b66a00a0cec7ffb76d3b 872044 libdevel optional libgit2-dev_1.5.1+ds-1+deb12u1_ppc64el.deb 5d811c8d222c2cab1a50d561cc6b06a9 8125 libs optional libgit2_1.5.1+ds-1+deb12u1_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEmyxOicioak1AZZAyyPVDLEOGa2QFAmXFNwsACgkQyPVDLEOG a2Q+ww//T+kQpUvV9jruGQboi3i+W2FOoCxQCSm4/MgYc4gb64WEAPnmOZneFKwt wbSEIZNhXHQ3LW2JopCMnTyfiloQ48NsuR/xDy/SN4vtDsOegw1Zdixmm7enTIbR mZl6L6rMx2CHz6NyLDT3mPbHp3vaWCFS00zuLwQ5MGAS5iI/n9KDQfdCU0MqnrQJ SBlkrvZWQJS+nZP/buJxF6Ta4QjJCBZcu2hSlM+OWMN9zxNqJN0QlKFfHJKp1KNa gIrh8laXYIck+zhPy3DM/ln4iFWv4FvsO1Durj/THGKj2/y2ZRXL1+2srTTNC1YX E3YpDX66FpMDb2A3KNmRQMPNOkjJkmSk06BRSIkh6UuRZSX3sbMAGT9Hd/EHGawv QQcInxPLG9LYqjr1iMe5CrF4Gde8oq12p5PiSSLOrRtdLLiGmy9o59tstH1TFT0P 04QHqdq1eUKKVi1N4/APqUVjHG3NyG/0BHm9JpVxYtH/NcEBJhxfUsG2l7ERvtC6 5qvcxYLNSsBb4TCrlEn8y8KsTrXXRWt4vW5z6DxCPfojPWBne4HnY8E/aZMjqNp/ DIH3sPY1cgX0pyIHzM7MoQqTpK1x7RqXvTSYu3Llk22Ge4oej/8byu++wckr4XX7 ZIbn+q6NPFo7ettY7NcbuKAzLBonuwztR2Ghgo23CdRJWfqdJ1c= =99hM -----END PGP SIGNATURE-----