summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorbsiegert <bsiegert@pkgsrc.org>2019-10-07 09:14:47 +0000
committerbsiegert <bsiegert@pkgsrc.org>2019-10-07 09:14:47 +0000
commita9de3b5d327dcd76d59dec0d4b579f6f30d6c57c (patch)
tree514d3b836fe7bdd8264203731457bc69818afecb
parentabe3012081dad22ef11477fce15dadf85b2efa20 (diff)
downloadpkgsrc-a9de3b5d327dcd76d59dec0d4b579f6f30d6c57c.tar.gz
Pullup ticket #6068 - requested by nia
devel/libgit2: security fix Revisions pulled up: - devel/libgit2/Makefile 1.40 - devel/libgit2/distinfo 1.18 --- Module Name: pkgsrc Committed By: nia Date: Sun Oct 6 12:18:30 UTC 2019 Modified Files: pkgsrc/devel/libgit2: Makefile distinfo Log Message: libgit2: Update to 0.28.3 This is a security release fixing the following issues: A carefully constructed commit object with a very large number of parents may lead to potential out-of-bounds writes or potential denial of service. The ProgramData configuration file is always read for compatibility with Git for Windows and Portable Git installations. The ProgramData location is not necessarily writable only by administrators, so we now ensure that the configuration file is owned by the administrator or the current user.
-rw-r--r--devel/libgit2/Makefile5
-rw-r--r--devel/libgit2/distinfo10
2 files changed, 7 insertions, 8 deletions
diff --git a/devel/libgit2/Makefile b/devel/libgit2/Makefile
index 5b4f1722892..f9b4daa62a9 100644
--- a/devel/libgit2/Makefile
+++ b/devel/libgit2/Makefile
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.39 2019/08/22 12:23:02 ryoon Exp $
+# $NetBSD: Makefile,v 1.39.2.1 2019/10/07 09:14:47 bsiegert Exp $
-DISTNAME= libgit2-0.28.2
-PKGREVISION= 3
+DISTNAME= libgit2-0.28.3
CATEGORIES= devel
MASTER_SITES= ${MASTER_SITE_GITHUB:=libgit2/}
GITHUB_TAG= v${PKGVERSION_NOREV}
diff --git a/devel/libgit2/distinfo b/devel/libgit2/distinfo
index c8224519621..9c63cab4bcd 100644
--- a/devel/libgit2/distinfo
+++ b/devel/libgit2/distinfo
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.17 2019/05/27 14:35:25 wiz Exp $
+$NetBSD: distinfo,v 1.17.4.1 2019/10/07 09:14:47 bsiegert Exp $
-SHA1 (libgit2-0.28.2.tar.gz) = 85025d651696a83c4d2a45932235ed1146c95cbc
-RMD160 (libgit2-0.28.2.tar.gz) = 18fbe97266d064b8857618066e156a4297fbcff4
-SHA512 (libgit2-0.28.2.tar.gz) = 0879c162e2e1dc00eadfbda22cd1f9d3a95b4ec2b653c108983f37c2f695140882de4d50d7cbc04ced247125a4e9fe6df16130e1267891aecdb2411d920db5c6
-Size (libgit2-0.28.2.tar.gz) = 4987586 bytes
+SHA1 (libgit2-0.28.3.tar.gz) = fb3c394b36e17ebb2cea42a2c407e899f90509a9
+RMD160 (libgit2-0.28.3.tar.gz) = 76e988d9229a58ff9f1e39e33a33317cb806f33e
+SHA512 (libgit2-0.28.3.tar.gz) = 15444823b7d4885f7b8c3982f8905efc4a75913de016a9b2e0a24d5ce9746e6a549dffd5469036529557feff2ce7ece9328266eb312c80b96091ce0f65ee97ee
+Size (libgit2-0.28.3.tar.gz) = 4988580 bytes