diff options
| author |   Simone Weiß <simone.p.weiss@posteo.com> | 2024-02-18 15:42:40 +0000 |
|---|---|---|
| committer |   Richard Purdie <richard.purdie@linuxfoundation.org> | 2024-02-18 22:02:23 +0000 |
| commit | 7191dcae3853728dbb95c4901c2fdb73f9066a66 (patch) | |
| tree | 90835cb778998ca651e1828573b32f4b711e6c92 /meta/recipes-support | |
| parent | 40cd768368167f81de5bb55e9ff0584035f4c1b4 (diff) | |
| download | openembedded-core-7191dcae3853728dbb95c4901c2fdb73f9066a66.tar.gz | |
libgit2: update 1.7.1 -> 1.7.2
Update libgit2 to pull in securtiy fixes.
Changelog summary:
- A bug in git_revparse_single is fixed that could cause a Denial of
Service attack. This fixes CVE-2024-24575
- A bug in git_index_add is fixed that could lead to arbitrary code execution.
This fixes CVE-2024-24577
- A bug in the smart transport negotiation could have caused an out-of-bounds
read.
Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-support')
| -rw-r--r-- | meta/recipes-support/libgit2/libgit2_1.7.2.bb (renamed from meta/recipes-support/libgit2/libgit2_1.7.1.bb) | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/recipes-support/libgit2/libgit2_1.7.1.bb b/meta/recipes-support/libgit2/libgit2_1.7.2.bb index 92af0b8454..d1629c0c0b 100644 --- a/meta/recipes-support/libgit2/libgit2_1.7.1.bb +++ b/meta/recipes-support/libgit2/libgit2_1.7.2.bb @@ -6,7 +6,7 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=5bdf47bbc9a39dc6ce076d59e322dc17" DEPENDS = "curl openssl zlib libssh2 libgcrypt libpcre2" SRC_URI = "git://github.com/libgit2/libgit2.git;branch=maint/v1.7;protocol=https" -SRCREV = "a2bde63741977ca0f4ef7db2f609df320be67a08" +SRCREV = "a418d9d4ab87bae16b87d8f37143a4687ae0e4b2" S = "${WORKDIR}/git" |