-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Feb 2024 12:31:43 +0100 Source: libgit2 Binary: libgit2-1.5 libgit2-1.5-dbgsym libgit2-dev Architecture: armel Version: 1.5.1+ds-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Timo Röhling Description: libgit2-1.5 - low-level Git library libgit2-dev - low-level Git library (development files) Closes: 1063415 1063416 Changes: libgit2 (1.5.1+ds-1+deb12u1) bookworm-security; urgency=high . * Team upload. * Fix CVE-2024-24575: Denial of service attack in git_revparse_single (Closes: #1063415) * Fix CVE-2024-24577: Use-after-free in git_index_add (Closes: #1063416) Checksums-Sha1: f247569ecb30b61153d7a6ea4b6fee02356e446f 1618180 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_armel.deb c14bc2c9de71b0043562283a71588a3f4c68a80c 424424 libgit2-1.5_1.5.1+ds-1+deb12u1_armel.deb 7e533e76995b41b1ac1fb42be1e35ae2df6a900f 722736 libgit2-dev_1.5.1+ds-1+deb12u1_armel.deb 5855d169940793a82a83821f67cb6381c3c37a75 7996 libgit2_1.5.1+ds-1+deb12u1_armel-buildd.buildinfo Checksums-Sha256: 38a57298b393c22673c1b3cd9ecf185ba41f4ac89c4f078e55f0e92081f6e40e 1618180 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_armel.deb a5251c4c53cebe977fdb394e666b9941721064eadee58483f2195262798cd907 424424 libgit2-1.5_1.5.1+ds-1+deb12u1_armel.deb 6341494f6fd34e7e54c24cd621b64d565307911f7ad057490d1f52b0b2417bbf 722736 libgit2-dev_1.5.1+ds-1+deb12u1_armel.deb ecca0641da07c85131c108a914db33b5a80fc1d166d022ceb9f2273abf94498f 7996 libgit2_1.5.1+ds-1+deb12u1_armel-buildd.buildinfo Files: 70c5180d779be5644572526cb0cd7238 1618180 debug optional libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_armel.deb 1c43a4f01b2e34e4001d11d0b1c0ab3b 424424 libs optional libgit2-1.5_1.5.1+ds-1+deb12u1_armel.deb 9a7f2ab7875fe1ff5436fedddbd08fca 722736 libdevel optional libgit2-dev_1.5.1+ds-1+deb12u1_armel.deb 178cb8df55a48d2f39f3c27c368c3865 7996 libs optional libgit2_1.5.1+ds-1+deb12u1_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBv+o19JDIRm4yIQ5CeROIpkCGwcFAmXFN9UACgkQCeROIpkC Gwe0mRAAlvsRB5FeK7yqAn5O2oTTE6r7cEk2zJc7FLOZGtQBZiiQkMmP8pzp3Oo2 8K33FcLn1ZvOSXRqrvepwdEmCZpKbygnBtAVpjWCbWYODWFonXaUQ1l66K+PzCS1 IITxnm0zodOG2cW0XLfvBJvxT4OcYCAF02QfdjfAMCxURxYqYIzN3SaTLDUbmjry c2j+GMUFbKbmzSzFKGTJHn9X86XRnJ3dWRm9pN3RoaZVGWLZJrXckXNBaW0sH7Ex dSvqnd7/qYALnbMmfROoIgD/jU3+4HgGyHbnUnfRVRY5lFAdNxZGKcbIhJrukNvE lFJ3vl1eUvBVNjN7Gy3dS9/ORGY4evfKRprUfvgWlR7oBdvamhXT/GfGud1DO2Yl LtofgPKghbsykBZ0vt6hBF3OCTT+42nWsenTJR9bbLILPAgOuEjq4bTVYf+l5jmx NRg56RjJVgIcLDg87R/dDKQrq4x8j5+38ezFDththtg7SdrIqDnHymV0YlclkYGe 5USbiDPVh83c83KVzo71eBKZT0+clLB5CaqM5fDXJj+nRrkzIDXGmS9wDt80LYJW NsLaOXwuQBTXS6l6Rt3JK4/AyZhki7PI9JJBDfZlDo5UxBatH/PHE01VmWTDZUP7 suR8/oCzqjElCtY5060io3tgkFhFUS4Szo/n8vwqxigZORXJlFg= =LAzM -----END PGP SIGNATURE-----