Path to this page:
Subject: CVS commit: [pkgsrc-2019Q3] pkgsrc/devel/libgit2
From: Benny Siegert
Date: 2019-10-07 11:14:48
Message id: 20191007091448.25ACFFBF4@cvs.NetBSD.org
Log Message:
Pullup ticket #6068 - requested by nia
devel/libgit2: security fix
Revisions pulled up:
- devel/libgit2/Makefile 1.40
- devel/libgit2/distinfo 1.18
---
Module Name: pkgsrc
Committed By: nia
Date: Sun Oct 6 12:18:30 UTC 2019
Modified Files:
pkgsrc/devel/libgit2: Makefile distinfo
Log Message:
libgit2: Update to 0.28.3
This is a security release fixing the following issues:
A carefully constructed commit object with a very large number
of parents may lead to potential out-of-bounds writes or
potential denial of service.
The ProgramData configuration file is always read for compatibility
with Git for Windows and Portable Git installations. The ProgramData
location is not necessarily writable only by administrators, so we
now ensure that the configuration file is owned by the administrator
or the current user.
Files: