UbuntuUpdates.org

Package "libgit2-28"

Name: libgit2-28

Description:

low-level Git library
Latest version: 0.28.4+dfsg.1-2ubuntu0.1
Release: focal (20.04)
Level: security
Repository: universe
Head package: libgit2
Homepage: https://libgit2.github.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libgit2-28"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libgit2-28" in Focal

Repository Area Version
base universe 0.28.4+dfsg.1-2
updates universe 0.28.4+dfsg.1-2ubuntu0.1

Changelog

Version: 0.28.4+dfsg.1-2ubuntu0.1 2024-03-05 20:06:52 UTC

  libgit2 (0.28.4+dfsg.1-2ubuntu0.1) focal-security; urgency=medium

  * SECURITY UPDATE: Improper Verification of Cryptographic Signature
    - debian/patches/CVE-2023-22742.patch: perform host key checking
      by default when using ssh.
    - CVE-2023-22742
  * SECURITY UPDATE: use-after-free
    - debian/patches/CVE-2024-24577.patch: correct index check in
      has_dir_name function used by git_index_add.
    - CVE-2024-24577

 -- Fabian Toepfer <email address hidden> Wed, 28 Feb 2024 08:18:43 +0100
CVE-2023-22742 libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not per
CVE-2024-24577 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality i


About   -   Send Feedback to @ubuntu_updates