UbuntuUpdates.org

Package "libgit2"

Name: libgit2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • low-level Git library
  • low-level Git library (development files)
Latest version: 0.28.4+dfsg.1-2ubuntu0.1
Release: focal (20.04)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "libgit2" in Focal

Repository Area Version
base universe 0.28.4+dfsg.1-2
updates universe 0.28.4+dfsg.1-2ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.28.4+dfsg.1-2ubuntu0.1 2024-03-05 20:06:52 UTC

  libgit2 (0.28.4+dfsg.1-2ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Improper Verification of Cryptographic Signature
    - debian/patches/CVE-2023-22742.patch: perform host key checking
      by default when using ssh.
    - CVE-2023-22742
  * SECURITY UPDATE: use-after-free
    - debian/patches/CVE-2024-24577.patch: correct index check in
      has_dir_name function used by git_index_add.
    - CVE-2024-24577

 -- Fabian Toepfer <email address hidden> Wed, 28 Feb 2024 08:18:43 +0100
CVE-2023-22742 libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not per
CVE-2024-24577 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality i


About   -   Send Feedback to @ubuntu_updates