-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Feb 2024 12:31:43 +0100 Source: libgit2 Binary: libgit2-1.5 libgit2-1.5-dbgsym libgit2-dev Architecture: armhf Version: 1.5.1+ds-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-arm-01) Changed-By: Timo Röhling Description: libgit2-1.5 - low-level Git library libgit2-dev - low-level Git library (development files) Closes: 1063415 1063416 Changes: libgit2 (1.5.1+ds-1+deb12u1) bookworm-security; urgency=high . * Team upload. * Fix CVE-2024-24575: Denial of service attack in git_revparse_single (Closes: #1063415) * Fix CVE-2024-24577: Use-after-free in git_index_add (Closes: #1063416) Checksums-Sha1: 5d6c49150af6b89e2c5d35e7a11da1a63c4167ce 1638648 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_armhf.deb 19b54a4da33f7f9ec7465f5ebac2662cbae8a671 434504 libgit2-1.5_1.5.1+ds-1+deb12u1_armhf.deb 5eeea28140e36367db10cb5dc0bc59af37576885 731024 libgit2-dev_1.5.1+ds-1+deb12u1_armhf.deb 65e8fabf1d565c113c3d11159b0bac831ab5f3cd 7998 libgit2_1.5.1+ds-1+deb12u1_armhf-buildd.buildinfo Checksums-Sha256: 63050453e9ec81aff693f7f0959097bb03912428d2b366fb214208ec070ed173 1638648 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_armhf.deb cc2195ecff98ee5cbf817be2b58bed709d539074c422b40d7b96507244e0e5c7 434504 libgit2-1.5_1.5.1+ds-1+deb12u1_armhf.deb 181ea3d427b78f47a3a9f9e4dc65c9fb77f3e575ff09c805ddf888ada56b0217 731024 libgit2-dev_1.5.1+ds-1+deb12u1_armhf.deb de86dea8a2797be16da97aca5c7e2ac2555013c634d37e893b6a8634d14ad6d7 7998 libgit2_1.5.1+ds-1+deb12u1_armhf-buildd.buildinfo Files: d1990e7b4a8c7b870a2d6fe742e42e0a 1638648 debug optional libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_armhf.deb 78442eb8cffca5c3d252175aeed38abb 434504 libs optional libgit2-1.5_1.5.1+ds-1+deb12u1_armhf.deb 3187e5064e9bb559bde5403e2a868654 731024 libdevel optional libgit2-dev_1.5.1+ds-1+deb12u1_armhf.deb 9d5384de533f8d9d399d215cbf783518 7998 libs optional libgit2_1.5.1+ds-1+deb12u1_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4Prg5L5o4koxD5sKbi61NfD5HDwFAmXFOFkACgkQbi61NfD5 HDwX6hAAkdD2NDz+7fnyKDFd1Ntlw0jwGcosI9YS/B8Usr0LZg9g2S7CI5Zolpe2 VM19zB7fcbtVWTVCWQFDEzLbRS2QqjxVuyskdSnH29UK0N/5/D+enYCw+i6cjKEs YKkkrN2t/2xd07o+YAnncCNKGffIEAqSmmorWk835b9CAgss92qDvLq5icA37wfD kL/xRPuLpWJfg0uByqP6RmwdV6YnevqI4d4FYEbLJ2wEexDP0bBB6idl2Uq36Y32 /5MQJT/c84XnUAaSWsYpSzRIe1CRk6ljOKJcR0XlsAymIdPOEKRthR3HS+An7Flv XaLEzp9LTbgNWi/56+18xI/jXK8wsgr8T/1S1g8DPca7U93m3r+gsa4o2+hsh8F2 pIK9l6+cDPM1HdwtojoC1oEsCHbQBE+/Y1+bwZU1d2203TXUpNSqpyL1TdKiNZ80 DiI462OQNQPQVEtxQAg6y8Eo3UsX85hneqmwLDo8cK93opfULc9nayAcaTzJgpB4 fZydfVvdHlSJ4t2UkuOP2wPeMXViKi6SfF9E5wVuBLO6DAUoR/Gr3ti/9VkskLAN COLgTO+OvjFTXbfzQRrP4FtuYcNOVqoW77h/ymiu4kK4f4J//SWaZsUOBgk79XU5 V5E4h8tHU/Agq+RJ02ZzXRJezfOFypd8/sVlXcWom/69KwNk7fA= =+PBu -----END PGP SIGNATURE-----