summaryrefslogtreecommitdiffstats
path: root/package/libgit2/libgit2.mk
diff options
context:
space:
mode:
authorBaruch Siach <baruch@tkos.co.il>2018-08-07 08:33:20 +0300
committerPeter Korsgaard <peter@korsgaard.com>2018-08-08 16:20:10 +0200
commitfffc281e6ecd7c460869e6098b30928334eb8b10 (patch)
tree1834175082b9e54f45beeaaac968ce7144facea1 /package/libgit2/libgit2.mk
parent760fbe789c77571b2baf1ddbb3b10207ece7fd7a (diff)
downloadbuildroot-fffc281e6ecd7c460869e6098b30928334eb8b10.tar.gz
buildroot-fffc281e6ecd7c460869e6098b30928334eb8b10.zip
libgit2: security bump to version 0.27.4
Fixes CVE-2018-10887 and CVE-2018-10888: out-of-bounds reads when reading objects from a packfile. Also fixes out-of-bounds reads when processing smart-protocol "ng" packets (no known CVE yet). Drop upstream patch. Cc: Nicolas Cavallari <nicolas.cavallari@green-communications.fr> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Reviewed-By: Nicolas Cavallari <nicolas.cavallari@green-communications.fr> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Diffstat (limited to 'package/libgit2/libgit2.mk')
-rw-r--r--package/libgit2/libgit2.mk2
1 files changed, 1 insertions, 1 deletions
diff --git a/package/libgit2/libgit2.mk b/package/libgit2/libgit2.mk
index 8b7b9f6d77..551e3dea62 100644
--- a/package/libgit2/libgit2.mk
+++ b/package/libgit2/libgit2.mk
@@ -4,7 +4,7 @@
#
################################################################################
-LIBGIT2_VERSION = v0.27.1
+LIBGIT2_VERSION = v0.27.4
LIBGIT2_SITE = $(call github,libgit2,libgit2,$(LIBGIT2_VERSION))
LIBGIT2_LICENSE = GPL-2.0 with linking exception
LIBGIT2_LICENSE_FILES = COPYING
OpenPOWER on IntegriCloud