-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 08 Feb 2024 12:31:43 +0100 Source: libgit2 Binary: libgit2-1.5 libgit2-1.5-dbgsym libgit2-dev Architecture: mipsel Version: 1.5.1+ds-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Timo Röhling Description: libgit2-1.5 - low-level Git library libgit2-dev - low-level Git library (development files) Closes: 1063415 1063416 Changes: libgit2 (1.5.1+ds-1+deb12u1) bookworm-security; urgency=high . * Team upload. * Fix CVE-2024-24575: Denial of service attack in git_revparse_single (Closes: #1063415) * Fix CVE-2024-24577: Use-after-free in git_index_add (Closes: #1063416) Checksums-Sha1: 1220c30ab0fc2b226f4aa67c5b88cd437f026f62 1685468 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_mipsel.deb 341f72a26f989148c981cabc4025467476042273 439928 libgit2-1.5_1.5.1+ds-1+deb12u1_mipsel.deb 180183dae4547ea02e75044b238068b718fe7b72 815064 libgit2-dev_1.5.1+ds-1+deb12u1_mipsel.deb 8a65f40df7b6d8d69cb42dd4b53bb5152b22459d 7955 libgit2_1.5.1+ds-1+deb12u1_mipsel-buildd.buildinfo Checksums-Sha256: 470993efc8e06bccfc67122cfc0e730948ec7ebcc88ddc90d89cf02a3652e748 1685468 libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_mipsel.deb e170534134e1a2ee4620a4cece5ea1a38dad52ba182dde3887f2734b33ec4bb5 439928 libgit2-1.5_1.5.1+ds-1+deb12u1_mipsel.deb 10e150d4f998819a90c43540ee13bd1cf4b513d8466c0839dab7552553c05eb8 815064 libgit2-dev_1.5.1+ds-1+deb12u1_mipsel.deb dcdd5bd48c522ff92a3210cde5365eee7634aadc52ed1b097dc0d5b1a2c776d7 7955 libgit2_1.5.1+ds-1+deb12u1_mipsel-buildd.buildinfo Files: 532f3d996aa515788141df44efd398c7 1685468 debug optional libgit2-1.5-dbgsym_1.5.1+ds-1+deb12u1_mipsel.deb a486b1d8e1ebe9f0bf064f0860ea1be8 439928 libs optional libgit2-1.5_1.5.1+ds-1+deb12u1_mipsel.deb 98e2135963937e02426099554b69e05c 815064 libdevel optional libgit2-dev_1.5.1+ds-1+deb12u1_mipsel.deb 8a543307066173335f625297f1d86c28 7955 libs optional libgit2_1.5.1+ds-1+deb12u1_mipsel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7FUbSrfgk+qhJhySoQbzkdO+xGgFAmXFQVcACgkQoQbzkdO+ xGjOhg/9H5yPYGcSwZZhGXIO39A9b7uAdZPwcsHBMHW2F8c5rDNdCJAxtCGWfxVe 69pCurRHE3PK5uVSezRGfPfsB7wKrHHvrrnzSTNxuAQmC4ML/3RfiXCj+9jnuUPQ mwC3LIOdnbesCow97mlMNqfZFZNCF+ALjSfb68THMg4gYQPntjcY0jNSkQ5Aav2K M0ajdb+mwb/LzZpnpeH+69qfDYZs5et5QyrxbgNCbdBMpyD1LZdRO/vqrzxy/Bbc /I5AxPK8+1V11+ahlT/HK6O7IASgNS517QTO7PXC8xhFIjysbfnJMyV+9VpS3hqk F/6XZm/zFUn8c86f1dUDgueN59rmUcsGSIJypE8meJu8Xp1jT2eutH6N/7AuQIg0 kiSY3syRg0OBUfzxGSzJtAFiBxcYx5ms1L4yC/dhZuC2U1zINtldMMm31dkmzGl1 bFjPWrN8lUPc1+zusbNorg193P2qdY1rIOou6UPUwf0OIzr8K4w68iMuKQ7WE5Fi Nq5ha41jQIL71kl2CqEehvW6aa7vKwTMFto1Lmv+LfRaZLWjcAnRt3Rc/u/0jHdY cHfLB7AvNiLxyRXEpDMsi+Gc1KXX/6ZBoxcqmrFfy1fSvcgNf0h9Haceoo1h5GLZ GScxtzkZm5UeLrrCgF9eLYm94SU5i5QmGTqftGgPv4RoEqd9khY= =xkTp -----END PGP SIGNATURE-----