linux/poky.git/meta/recipes-support/libgit2/libgit2_1.7.2.bb, branch scarthgap Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=scarthgap 2024-02-18T22:02:40+00:00 libgit2: update 1.7.1 -> 1.7.2 2024-02-18T22:02:40+00:00 Simone Weiß simone.p.weiss@posteo.com 2024-02-18T15:42:40+00:00 urn:sha1:591406e756455ed8ec181c4fef46918b8559e376 Update libgit2 to pull in securtiy fixes. Changelog summary: - A bug in git_revparse_single is fixed that could cause a Denial of Service attack. This fixes CVE-2024-24575 - A bug in git_index_add is fixed that could lead to arbitrary code execution. This fixes CVE-2024-24577 - A bug in the smart transport negotiation could have caused an out-of-bounds read. (From OE-Core rev: 7191dcae3853728dbb95c4901c2fdb73f9066a66) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>