[ubuntu/jammy-security] libgit2 1.1.0+dfsg.1-4.1ubuntu0.1 (Accepted)

[Fabian Toepfer]

libgit2 (1.1.0+dfsg.1-4.1ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Improper Verification of Cryptographic Signature
    - debian/patches/CVE-2023-22742.patch: perform host key checking
      by default when using ssh.
    - CVE-2023-22742
  * SECURITY UPDATE: use-after-free
    - debian/patches/CVE-2024-24577.patch: correct index check in
      has_dir_name function used by git_index_add.
    - CVE-2024-24577

Date: 2024-03-01 08:29:10.552347+00:00
Changed-By: Fabian Toepfer <fabian.toepfer at canonical.com>
https://launchpad.net/ubuntu/+source/libgit2/1.1.0+dfsg.1-4.1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.