Browse Source

package/libgit2: security bump to version 1.6.5

Fixes the following security issues:

- CVE-2024-24575 (infinite loop DoS on revision lookup) and
- CVE-2024-24577 (heap out of bound write on index update)

https://github.com/libgit2/libgit2/releases/tag/v1.6.5

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Peter Korsgaard 1 year ago
parent
commit
b79aceec50
2 changed files with 2 additions and 2 deletions
  1. 1 1
      package/libgit2/libgit2.hash
  2. 1 1
      package/libgit2/libgit2.mk

+ 1 - 1
package/libgit2/libgit2.hash

@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  d25866a4ee275a64f65be2d9a663680a5cf1ed87b7ee4c534997562c828e500d  libgit2-1.6.4.tar.gz
+sha256  0f09dd49e409913c94df00eeb5b54f8b597905071b454c7f614f8c6e1ddb8d75  libgit2-1.6.5.tar.gz
 sha256  6f3c2cd59b057e366c1acc073b038135c52d77892bb33bd4d931c5369d3f062b  COPYING

+ 1 - 1
package/libgit2/libgit2.mk

@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBGIT2_VERSION = 1.6.4
+LIBGIT2_VERSION = 1.6.5
 LIBGIT2_SITE = $(call github,libgit2,libgit2,v$(LIBGIT2_VERSION))
 LIBGIT2_LICENSE = \
 	GPL-2.0 with linking exception, \