diff options
| author | Baruch Siach <baruch@tkos.co.il> | 2018-08-07 08:33:20 +0300 |
|---|---|---|
| committer | Peter Korsgaard <peter@korsgaard.com> | 2018-08-08 16:20:10 +0200 |
| commit | fffc281e6ecd7c460869e6098b30928334eb8b10 (patch) | |
| tree | 1834175082b9e54f45beeaaac968ce7144facea1 /package/libgit2/libgit2.hash | |
| parent | 760fbe789c77571b2baf1ddbb3b10207ece7fd7a (diff) | |
| download | buildroot-fffc281e6ecd7c460869e6098b30928334eb8b10.tar.gz buildroot-fffc281e6ecd7c460869e6098b30928334eb8b10.zip | |
libgit2: security bump to version 0.27.4
Fixes CVE-2018-10887 and CVE-2018-10888: out-of-bounds reads when
reading objects from a packfile.
Also fixes out-of-bounds reads when processing smart-protocol "ng"
packets (no known CVE yet).
Drop upstream patch.
Cc: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Reviewed-By: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/libgit2/libgit2.hash')
| -rw-r--r-- | package/libgit2/libgit2.hash | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/package/libgit2/libgit2.hash b/package/libgit2/libgit2.hash index 43d8f9930e..41ab87bf4d 100644 --- a/package/libgit2/libgit2.hash +++ b/package/libgit2/libgit2.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 837b11927bc5f64e7f9ab0376f57cfe3ca5aa52ffd2007ac41184b21124fb086 libgit2-v0.27.1.tar.gz +sha256 0b7ca31cb959ff1b22afa0da8621782afe61f99242bf716c403802ffbdb21d51 libgit2-v0.27.4.tar.gz sha256 d9a8038088df84fde493fa33a0f1e537252eeb9642122aa4b862690197152813 COPYING |
