Subject: CVS commit: [pkgsrc-2019Q3] pkgsrc/devel/libgit2
From: Benny Siegert
Date: 2019-10-07 11:14:48
Message id: 20191007091448.25ACFFBF4@cvs.NetBSD.org

Log Message:
Pullup ticket #6068 - requested by nia
devel/libgit2: security fix

Revisions pulled up:
- devel/libgit2/Makefile                                        1.40
- devel/libgit2/distinfo                                        1.18

---
   Module Name:	pkgsrc
   Committed By:	nia
   Date:		Sun Oct  6 12:18:30 UTC 2019

   Modified Files:
   	pkgsrc/devel/libgit2: Makefile distinfo

   Log Message:
   libgit2: Update to 0.28.3

   This is a security release fixing the following issues:

       A carefully constructed commit object with a very large number
       of parents may lead to potential out-of-bounds writes or
       potential denial of service.

       The ProgramData configuration file is always read for compatibility
       with Git for Windows and Portable Git installations. The ProgramData
       location is not necessarily writable only by administrators, so we
       now ensure that the configuration file is owned by the administrator
       or the current user.

Files:
RevisionActionfile
1.39.2.1modifypkgsrc/devel/libgit2/Makefile
1.17.4.1modifypkgsrc/devel/libgit2/distinfo