-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Feb 2024 12:31:43 +0100 Source: libgit2 Binary: libgit2-1.5 libgit2-1.5-dbgsym libgit2-dev Architecture: arm64 Version: 1.5.1+ds-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-arm-03) Changed-By: Timo Röhling Description: libgit2-1.5 - low-level Git library libgit2-dev - low-level Git library (development files) Closes: 1063415 1063416 Changes: libgit2 (1.5.1+ds-1+deb12u1) bookworm-security; urgency=high . * Team upload. * Fix CVE-2024-24575: Denial of service attack in git_revparse_single (Closes: #1063415) * Fix CVE-2024-24577: Use-after-free in git_index_add (Closes: #1063416) Checksums-Sha1: 5691534311d14e5af5f46b8b6c60722f98d89ecd 1646276 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_arm64.deb 338567cbfdae91040f4188e73e7948c1d947cb21 468244 libgit2-1.5_1.5.1+ds-1+deb12u1_arm64.deb 61b51f8f81318b15b9358f149098eb0a2ba67575 783532 libgit2-dev_1.5.1+ds-1+deb12u1_arm64.deb 9108a08a06a9821d100859e93a6966c9841854e9 8122 libgit2_1.5.1+ds-1+deb12u1_arm64-buildd.buildinfo Checksums-Sha256: 9a7bccb435ba7d9e425dca66ad8b4e538280d20d0f21c929aa7b3be82210b93a 1646276 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_arm64.deb 6b3636af042994d387355d0b1adec6b9da5d3309a0cae7223d723c796ced6978 468244 libgit2-1.5_1.5.1+ds-1+deb12u1_arm64.deb 7179bfdccca519bd4eacf7ac2f5695024792f905ac16a6c1db111f4ee5f5727f 783532 libgit2-dev_1.5.1+ds-1+deb12u1_arm64.deb 89d847a65a7e5e9a6b5bdff055742dd6dd2e8d39bf581ad54de119cf25ec8808 8122 libgit2_1.5.1+ds-1+deb12u1_arm64-buildd.buildinfo Files: 5ca2c2015183038cf5602f57fc05a2c1 1646276 debug optional libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_arm64.deb 58a4d582f4acfc9f80fbe35a98bc9186 468244 libs optional libgit2-1.5_1.5.1+ds-1+deb12u1_arm64.deb 7a6af903ff75fac916b54cd8f375dfd1 783532 libdevel optional libgit2-dev_1.5.1+ds-1+deb12u1_arm64.deb 2591b1a6b06e4b5d2a2a9d3baf216a7f 8122 libs optional libgit2_1.5.1+ds-1+deb12u1_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEExwLooY4pOBEnRvQOhwvc65q7iiUFAmXFOP4ACgkQhwvc65q7 iiWdmA//eNAgjcnykPOZtOXxs6kUcvsitOR78WeylDdzvuytsYlyKnZz+XEyhJkA /fkFMgF9V58Ve93Z11vuqaXZowW3rr/BqZMnjojS/d2NM0/PP5gFzC99XXmze4ff AfVVhGDGMRtrzlM5w35fYKsXetk4yigVeu0HLU1wbGdgbUDOt4McNiRJFgqLVYZf c/OWQJysv9GFkH0vrNehLm0h7x200K7j256twx5hvXeMvMQVEnfaTIHDcIipdxvC OtLw24+bt/oxs85m0vf+pcDV2cEvhE9bu77CsKf2UfGa8tnh+WPv3kDYCxxozjAO Sl1uH4kYJqbNa20gsg6ayueUiAhKfwHU4Xc3fx0x4qWlIlDv5wuo6GvmeEQbRfaM o8YBUV3E/D0jZd0YCuBEXd03vDF2AjnryolJTYIc0W/Da5H1zfAPIMg2hJi/50hl q0oUFznbwuG2eZ0rJsqTO8u/4hc3naoYohkzY/ORf5zMvZg7tiRv3iLzff6E45aR Q7juEtaFrnQbwaWOBPOkVF+GMiH1tsAOeXLM7DEjZ6WHiz42tV1wudkM7DU0dAwP RoMkyNUidgvPS3XwfeYXpzcoJfXqlTPZTkbVb3gl0rbzJ9o60vKPml4hFZlTp7Fi /e2BqxS0fxSGIq4IstJXikagkagYHprlgoHL1v11BaNOeuk9C/U= =FIon -----END PGP SIGNATURE-----