From b79aceec50d8bd0ca8ad8138f62d5778717349ed Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Thu, 21 Mar 2024 21:34:48 +0100 Subject: [PATCH] package/libgit2: security bump to version 1.6.5 Fixes the following security issues: - CVE-2024-24575 (infinite loop DoS on revision lookup) and - CVE-2024-24577 (heap out of bound write on index update) https://github.com/libgit2/libgit2/releases/tag/v1.6.5 Signed-off-by: Peter Korsgaard --- package/libgit2/libgit2.hash | 2 +- package/libgit2/libgit2.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/libgit2/libgit2.hash b/package/libgit2/libgit2.hash index 4dd6519ca3..9d2cb0db48 100644 --- a/package/libgit2/libgit2.hash +++ b/package/libgit2/libgit2.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 d25866a4ee275a64f65be2d9a663680a5cf1ed87b7ee4c534997562c828e500d libgit2-1.6.4.tar.gz +sha256 0f09dd49e409913c94df00eeb5b54f8b597905071b454c7f614f8c6e1ddb8d75 libgit2-1.6.5.tar.gz sha256 6f3c2cd59b057e366c1acc073b038135c52d77892bb33bd4d931c5369d3f062b COPYING diff --git a/package/libgit2/libgit2.mk b/package/libgit2/libgit2.mk index 9ddf2374bb..cc267ecf1d 100644 --- a/package/libgit2/libgit2.mk +++ b/package/libgit2/libgit2.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBGIT2_VERSION = 1.6.4 +LIBGIT2_VERSION = 1.6.5 LIBGIT2_SITE = $(call github,libgit2,libgit2,v$(LIBGIT2_VERSION)) LIBGIT2_LICENSE = \ GPL-2.0 with linking exception, \