Format: 1.8
Date: Wed, 05 Sep 2018 12:52:25 -0400
Source: libgit2
Binary: libgit2-dev libgit2-0 libgit2-dbg
Architecture: armhf
Version: 0.19.0-2ubuntu0.4
Distribution: trusty
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-024.buildd>
Changed-By: Mike Salvatore <mike.salvatore@canonical.com>
Description: 
 libgit2-0  - low-level Git library
 libgit2-dbg - libgit2 library and debugging symbols
 libgit2-dev - low-level Git library (development files)
Changes: 
 libgit2 (0.19.0-2ubuntu0.4) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: Out of bounds read
     - debian/patches/CVE-2018-10887-1.patch: delta: Fix sign-extension of big
       left-shift
     - debian/patches/CVE-2018-10887-2.patch: delta: fix overflow when
       computing limit
     - debian/patches/CVE-2018-10888.patch fix out-of-bounds read of delta
     - debian/patches/fix-umask-fragility.patch: Fix umask issues in unit tests
       so that build can complete successfully. (needed to successfully build)
     - debian/patches/pool_alloc_sizes.patch: Round up pool alloc sizes for
       alignment (needed to successfully build on armhf)
     - CVE-2018-10887, CVE-2018-10888
Checksums-Sha1: 
 646845e3d6676c9af620fce7a435176bf196e90c 357370 libgit2-dev_0.19.0-2ubuntu0.4_armhf.deb
 96fe51b8cbe7737efbc4a5f06af13c1fedd66c25 202224 libgit2-0_0.19.0-2ubuntu0.4_armhf.deb
 f7192c26488e8179a5395bddafc8bfc1068f8220 923248 libgit2-dbg_0.19.0-2ubuntu0.4_armhf.deb
 b816f81833d447e91b8ce924eb65d2dc27d3e7e9 924 libgit2-dev-dbgsym_0.19.0-2ubuntu0.4_armhf.ddeb
 bb7610ec52750a74bb28c45ae275c1369621cd62 894 libgit2-0-dbgsym_0.19.0-2ubuntu0.4_armhf.ddeb
Checksums-Sha256: 
 2d30b5af0a2c858a50a9a426d571be5b00b837b940d4256b9cdab07b7792a6aa 357370 libgit2-dev_0.19.0-2ubuntu0.4_armhf.deb
 383aa8d3d126ada893f4bcd0fe315d56936bacd4f33f16fb949126d1e36b5efb 202224 libgit2-0_0.19.0-2ubuntu0.4_armhf.deb
 aa586bf01de408451cdd35b49199922e409eefffbc5376cf7e53eecf0b085a70 923248 libgit2-dbg_0.19.0-2ubuntu0.4_armhf.deb
 8fc4209232b9445c37f037b2a210728e712410d649141c738485ea2080f84ad0 924 libgit2-dev-dbgsym_0.19.0-2ubuntu0.4_armhf.ddeb
 7ae381f173d15e9aed2416827c0fdaccecd2ce57eeee9896272e4b728a0379be 894 libgit2-0-dbgsym_0.19.0-2ubuntu0.4_armhf.ddeb
Files: 
 2e106ce7a52ba050e0b47b725ed1f496 357370 libdevel extra libgit2-dev_0.19.0-2ubuntu0.4_armhf.deb
 6972725f44fc96f547f226f571ea9127 202224 libs extra libgit2-0_0.19.0-2ubuntu0.4_armhf.deb
 511fc983ea548fa41ba7b6798d27a9fb 923248 debug extra libgit2-dbg_0.19.0-2ubuntu0.4_armhf.deb
 f13b74e1cde60f87f4485a4540d6f6a4 924 libdevel extra libgit2-dev-dbgsym_0.19.0-2ubuntu0.4_armhf.ddeb
 e59d6ceb288b56547791071b5043f418 894 libs extra libgit2-0-dbgsym_0.19.0-2ubuntu0.4_armhf.ddeb
Original-Maintainer: Russell Sim <russell.sim@gmail.com>