* [Buildroot] [PATCH 1/1] package/libgit2: bump version to 1.4.3
@ 2022-04-27 7:22 Nicolas Cavallari
2022-04-27 19:38 ` Arnout Vandecappelle
0 siblings, 1 reply; 2+ messages in thread
From: Nicolas Cavallari @ 2022-04-27 7:22 UTC (permalink / raw)
To: buildroot
git added restrictions on config files to fix CVE 2022-24765. libgit2
adopted these changes for compatibility reasons, even if the vuln is
not exploitable in libgit2.
https://github.com/libgit2/libgit2/releases/tag/v1.4.3
Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
---
package/libgit2/libgit2.hash | 2 +-
package/libgit2/libgit2.mk | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/package/libgit2/libgit2.hash b/package/libgit2/libgit2.hash
index ada411ea22..3b5837f789 100644
--- a/package/libgit2/libgit2.hash
+++ b/package/libgit2/libgit2.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 901c2b4492976b86477569502a41c31b274b69adc177149c02099ea88404ef19 libgit2-1.4.2.tar.gz
+sha256 f48b961e463a9e4e7e7e58b21a0fb5a9b2a1d24d9ba4d15870a0c9b8ad965163 libgit2-1.4.3.tar.gz
sha256 0092f24acc306ee3287dc05b5e85cb9e0e48cd3f11c60c4625b1a673a5912616 COPYING
diff --git a/package/libgit2/libgit2.mk b/package/libgit2/libgit2.mk
index e94dd9c370..3f1e6e1593 100644
--- a/package/libgit2/libgit2.mk
+++ b/package/libgit2/libgit2.mk
@@ -4,7 +4,7 @@
#
################################################################################
-LIBGIT2_VERSION = 1.4.2
+LIBGIT2_VERSION = 1.4.3
LIBGIT2_SITE = $(call github,libgit2,libgit2,v$(LIBGIT2_VERSION))
LIBGIT2_LICENSE = GPL-2.0 with linking exception, MIT (sha1), wildmatch license (wildmatch), CC0-1.0 (xoroshiro256)
LIBGIT2_LICENSE_FILES = COPYING
--
2.36.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 2+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/libgit2: bump version to 1.4.3
2022-04-27 7:22 [Buildroot] [PATCH 1/1] package/libgit2: bump version to 1.4.3 Nicolas Cavallari
@ 2022-04-27 19:38 ` Arnout Vandecappelle
0 siblings, 0 replies; 2+ messages in thread
From: Arnout Vandecappelle @ 2022-04-27 19:38 UTC (permalink / raw)
To: Nicolas Cavallari, buildroot
On 27/04/2022 09:22, Nicolas Cavallari wrote:
> git added restrictions on config files to fix CVE 2022-24765. libgit2
> adopted these changes for compatibility reasons, even if the vuln is
> not exploitable in libgit2.
>
> https://github.com/libgit2/libgit2/releases/tag/v1.4.3
>
> Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Applied to master, thanks.
Regards,
Arnout
> ---
> package/libgit2/libgit2.hash | 2 +-
> package/libgit2/libgit2.mk | 2 +-
> 2 files changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/package/libgit2/libgit2.hash b/package/libgit2/libgit2.hash
> index ada411ea22..3b5837f789 100644
> --- a/package/libgit2/libgit2.hash
> +++ b/package/libgit2/libgit2.hash
> @@ -1,3 +1,3 @@
> # Locally calculated
> -sha256 901c2b4492976b86477569502a41c31b274b69adc177149c02099ea88404ef19 libgit2-1.4.2.tar.gz
> +sha256 f48b961e463a9e4e7e7e58b21a0fb5a9b2a1d24d9ba4d15870a0c9b8ad965163 libgit2-1.4.3.tar.gz
> sha256 0092f24acc306ee3287dc05b5e85cb9e0e48cd3f11c60c4625b1a673a5912616 COPYING
> diff --git a/package/libgit2/libgit2.mk b/package/libgit2/libgit2.mk
> index e94dd9c370..3f1e6e1593 100644
> --- a/package/libgit2/libgit2.mk
> +++ b/package/libgit2/libgit2.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -LIBGIT2_VERSION = 1.4.2
> +LIBGIT2_VERSION = 1.4.3
> LIBGIT2_SITE = $(call github,libgit2,libgit2,v$(LIBGIT2_VERSION))
> LIBGIT2_LICENSE = GPL-2.0 with linking exception, MIT (sha1), wildmatch license (wildmatch), CC0-1.0 (xoroshiro256)
> LIBGIT2_LICENSE_FILES = COPYING
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2022-04-27 19:39 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2022-04-27 7:22 [Buildroot] [PATCH 1/1] package/libgit2: bump version to 1.4.3 Nicolas Cavallari
2022-04-27 19:38 ` Arnout Vandecappelle
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.