Saturday, November 03, 2018

[UPDATE] devel/libgit2 0.27.2 -> 0.27.5 (CVE)

Hi,

This updates libgit2 from 0.27.2 to 0.27.5.

CVE-2018-17456 (<0.27.5):
https://github.com/libgit2/libgit2/releases/tag/v0.27.5

CVE-2018-10887 (<0.27.3):
CVE-2018-10888 (<0.27.3):
https://github.com/libgit2/libgit2/releases/tag/v0.27.3


Briefly tested and build on amd64.

Patch below:


diff --git a/devel/libgit2/libgit2/Makefile b/devel/libgit2/libgit2/Makefile
index 5e1c58af709..9aa49155d30 100644
--- a/devel/libgit2/libgit2/Makefile
+++ b/devel/libgit2/libgit2/Makefile
@@ -4,7 +4,7 @@ COMMENT= the Git library, take 2

GH_ACCOUNT = libgit2
GH_PROJECT = libgit2
-GH_TAGNAME = v0.27.2
+GH_TAGNAME = v0.27.5

SHARED_LIBS += git2 11.0 # 0.25

diff --git a/devel/libgit2/libgit2/distinfo b/devel/libgit2/libgit2/distinfo
index 7d806c3df4b..a58b26d0398 100644
--- a/devel/libgit2/libgit2/distinfo
+++ b/devel/libgit2/libgit2/distinfo
@@ -1,2 +1,2 @@
-SHA256 (libgit/libgit2-0.27.2.tar.gz) = /6zb1ViK6wPpjjhmp+LOrORocjpDm9ybsBNi/hQPqeU=
-SIZE (libgit/libgit2-0.27.2.tar.gz) = 4770842
+SHA256 (libgit/libgit2-0.27.5.tar.gz) = FfJ3X08yWVHZE57ZBlArbHH+5nh8ramwRfWZQHLMvTM=
+SIZE (libgit/libgit2-0.27.5.tar.gz) = 4775158

--
Kind regards,
Hiltjo

No comments:

Post a Comment