On Sat, Nov 10, 2018 at 07:59:36PM +0100, Hiltjo Posthuma wrote:
> Ping + below a patch to bump to the latest version 0.27.7 (no CVEs this time,
> but some security fixes).
Sorry, the 0.27.5 update was on my list but slipped through.
Committed now, thanks!
On Sat, Nov 03, 2018 at 04:09:16PM +0100, Hiltjo Posthuma wrote:
> Hi,
>
> This updates libgit2 from 0.27.2 to 0.27.5.
>
> CVE-2018-17456 (<0.27.5):
> https://github.com/libgit2/libgit2/releases/tag/v0.27.5
>
> CVE-2018-10887 (<0.27.3):
> CVE-2018-10888 (<0.27.3):
>
Hi,
This updates libgit2 from 0.27.2 to 0.27.5.
CVE-2018-17456 (<0.27.5):
https://github.com/libgit2/libgit2/releases/tag/v0.27.5
CVE-2018-10887 (<0.27.3):
CVE-2018-10888 (<0.27.3):
https://github.com/libgit2/libgit2/releases/tag/v0.27.3
Briefly tested and build on amd64.
Patch below:
diff