libgit2 0.19.0-2ubuntu0.4 source package in Ubuntu

Changelog

libgit2 (0.19.0-2ubuntu0.4) trusty-security; urgency=medium

  * SECURITY UPDATE: Out of bounds read
    - debian/patches/CVE-2018-10887-1.patch: delta: Fix sign-extension of big
      left-shift
    - debian/patches/CVE-2018-10887-2.patch: delta: fix overflow when
      computing limit
    - debian/patches/CVE-2018-10888.patch fix out-of-bounds read of delta
    - debian/patches/fix-umask-fragility.patch: Fix umask issues in unit tests
      so that build can complete successfully. (needed to successfully build)
    - debian/patches/pool_alloc_sizes.patch: Round up pool alloc sizes for
      alignment (needed to successfully build on armhf)
    - CVE-2018-10887, CVE-2018-10888

 -- Mike Salvatore <email address hidden>  Wed, 05 Sep 2018 12:52:25 -0400

Upload details

Uploaded by:
Mike Salvatore
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates universe libs
Trusty security universe libs

Downloads

File Size SHA-256 Checksum
libgit2_0.19.0.orig.tar.gz 3.0 MiB d5b4c96f130667f0ce39d41f5cda33cb414fd4df3210b03de1ef34154521c279
libgit2_0.19.0-2ubuntu0.4.debian.tar.gz 19.4 KiB d11d2eaf0b47a500f74283c526cd1f32bf62b4ebd35bb6d9dfcb66042e60ef7a
libgit2_0.19.0-2ubuntu0.4.dsc 2.1 KiB eca19423ea5e6807d7609791784ab4eeec8a2522eac2ca0a78e7fe6294d49f35

View changes file

Binary packages built by this source

libgit2-0: low-level Git library

 libgit2 is a portable, pure C implementation of the Git
 distributed version control system core methods provided as a
 re-entrant link-able library with a solid API.

libgit2-0-dbgsym: debug symbols for package libgit2-0

 libgit2 is a portable, pure C implementation of the Git
 distributed version control system core methods provided as a
 re-entrant link-able library with a solid API.

libgit2-dbg: libgit2 library and debugging symbols

 libgit2 is a portable, pure C implementation of the Git
 distributed version control system core methods provided as a
 re-entrant link-able library with a solid API.
 .
 This package contains detached debugging symbols.
 .
 Most people will not need this package.

libgit2-dev: low-level Git library (development files)

 libgit2 is a portable, pure C implementation of the Git
 distributed version control system core methods provided as a
 re-entrant link-able library with a solid API.
 .
 This package contains the development files for libgit2.

libgit2-dev-dbgsym: debug symbols for package libgit2-dev

 libgit2 is a portable, pure C implementation of the Git
 distributed version control system core methods provided as a
 re-entrant link-able library with a solid API.
 .
 This package contains the development files for libgit2.