[ubuntu/mantic-updates] libgit2 1.5.1+ds-1ubuntu1.1 (Accepted)

Ubuntu Archive Robot ubuntu-archive-robot at lists.canonical.com
Tue Mar 5 20:58:19 UTC 2024


libgit2 (1.5.1+ds-1ubuntu1.1) mantic-security; urgency=medium

  * SECURITY UPDATE: denial-of-service
    - debian/patches/CVE-2024-24575.patch: fix parsing bug for trailing @
    in revparse function used by git_revparse_single.
    - CVE-2024-24575
  * SECURITY UPDATE: use-after-free
    - debian/patches/CVE-2024-24577.patch: correct index check in
      has_dir_name function used by git_index_add.
    - CVE-2024-24577

Date: 2024-03-01 08:29:17.540461+00:00
Changed-By: Fabian Toepfer <fabian.toepfer at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/libgit2/1.5.1+ds-1ubuntu1.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the mantic-changes mailing list