-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 08 Feb 2024 12:31:43 +0100
Source: libgit2
Architecture: source
Version: 1.5.1+ds-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: Utkarsh Gupta <utkarsh@debian.org>
Changed-By: Timo Röhling <roehling@debian.org>
Closes: 1063415 1063416
Changes:
 libgit2 (1.5.1+ds-1+deb12u1) bookworm-security; urgency=high
 .
   * Team upload.
   * Fix CVE-2024-24575: Denial of service attack in git_revparse_single
     (Closes: #1063415)
   * Fix CVE-2024-24577: Use-after-free in git_index_add
     (Closes: #1063416)
Checksums-Sha1:
 8d7b4020ea6712a2c9df2a791bb7bfc22d02477f 2112 libgit2_1.5.1+ds-1+deb12u1.dsc
 dd806b1ada676e13c58924f4b0326aafc236407f 3077056 libgit2_1.5.1+ds.orig.tar.xz
 9eed581e0778a7c8bf15a78b06102bd44f8e4d37 19664 libgit2_1.5.1+ds-1+deb12u1.debian.tar.xz
 109e671818f976c5fa2b0b2be08d505481040f0b 7540 libgit2_1.5.1+ds-1+deb12u1_source.buildinfo
Checksums-Sha256:
 b4de836d38cb2aca2687420754c5fa955f719934b92a4213d787d0b7dc2abebf 2112 libgit2_1.5.1+ds-1+deb12u1.dsc
 96369433500bb528f036c16be9921bd437c098b745f1aaeccb91290815518970 3077056 libgit2_1.5.1+ds.orig.tar.xz
 e869077309d8fa0bc56701970af7c6908d02674a89271f7cb29cb31814b69382 19664 libgit2_1.5.1+ds-1+deb12u1.debian.tar.xz
 2e079099eb44ce076880d17d64bbce05ea6fce830a6ce6779acc1fa080cdca61 7540 libgit2_1.5.1+ds-1+deb12u1_source.buildinfo
Files:
 0bf1984ee3362089aa4c5f769ede1037 2112 libs optional libgit2_1.5.1+ds-1+deb12u1.dsc
 e2c43b37fee144c89732adce700fba75 3077056 libs optional libgit2_1.5.1+ds.orig.tar.xz
 72c3b51c443d6129da0fe7038f2c7966 19664 libs optional libgit2_1.5.1+ds-1+deb12u1.debian.tar.xz
 267a637ab08981fb917804e3f19fbed9 7540 libs optional libgit2_1.5.1+ds-1+deb12u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ZmFL
-----END PGP SIGNATURE-----