Files
buildroot/package/libgit2/libgit2.hash
Nicolas Cavallari c4debc9909 package/libgit2: security bump version to 1.9.2
Fix two vulnerabilities related to SSH support:
* The external SSH execution code lacked shell quoting on repositories
  name, resulting in arbitrary command execution.
* SSH public keys were zeroed by calling memset with the wrong length,
  resulting in either buffer overflow or incomplete zeroing.

Release notes:
https://github.com/libgit2/libgit2/releases/tag/v1.9.2

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
2025-12-10 21:11:09 +01:00

4 lines
198 B
Plaintext

# Locally calculated
sha256 6f097c82fc06ece4f40539fb17e9d41baf1a5a2fc26b1b8562d21b89bc355fe6 libgit2-1.9.2.tar.gz
sha256 e3712465634e97cfd850822a4eb5ac7d2f8a10f753189366d5a2060046f28288 COPYING