mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-08 23:51:08 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libgit2: security bump version to 1.9.2

Browse Source 
Fix two vulnerabilities related to SSH support:
* The external SSH execution code lacked shell quoting on repositories
  name, resulting in arbitrary command execution.
* SSH public keys were zeroed by calling memset with the wrong length,
  resulting in either buffer overflow or incomplete zeroing.

Release notes:
https://github.com/libgit2/libgit2/releases/tag/v1.9.2

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit c4debc9909)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Nicolas Cavallari
2025-12-10 14:14:21 +01:00
committed by Thomas Perale
parent 16fd8b6b35
commit 765f70d59d
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
package/libgit2/libgit2.hash
View File

@@ -1,3 +1,3 @@
# Locally calculated
sha256 14cab3014b2b7ad75970ff4548e83615f74d719afe00aa479b4a889c1e13fc00 libgit2-1.9.1.tar.gz
sha256 6f097c82fc06ece4f40539fb17e9d41baf1a5a2fc26b1b8562d21b89bc355fe6 libgit2-1.9.2.tar.gz
sha256 e3712465634e97cfd850822a4eb5ac7d2f8a10f753189366d5a2060046f28288 COPYING

2
package/libgit2/libgit2.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBGIT2_VERSION = 1.9.1
LIBGIT2_VERSION = 1.9.2
LIBGIT2_SITE = $(call github,libgit2,libgit2,v$(LIBGIT2_VERSION))
LIBGIT2_LICENSE = \
GPL-2.0 with linking exception, \