Format: 1.8
Date: Wed, 05 Sep 2018 12:52:25 -0400
Source: libgit2
Binary: libgit2-dev libgit2-0 libgit2-dbg
Architecture: i386
Version: 0.19.0-2ubuntu0.4
Distribution: trusty
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-amd64-018.buildd>
Changed-By: Mike Salvatore <mike.salvatore@canonical.com>
Description: 
 libgit2-0  - low-level Git library
 libgit2-dbg - libgit2 library and debugging symbols
 libgit2-dev - low-level Git library (development files)
Changes: 
 libgit2 (0.19.0-2ubuntu0.4) trusty-security; urgency=medium
 .
   * SECURITY UPDATE: Out of bounds read
     - debian/patches/CVE-2018-10887-1.patch: delta: Fix sign-extension of big
       left-shift
     - debian/patches/CVE-2018-10887-2.patch: delta: fix overflow when
       computing limit
     - debian/patches/CVE-2018-10888.patch fix out-of-bounds read of delta
     - debian/patches/fix-umask-fragility.patch: Fix umask issues in unit tests
       so that build can complete successfully. (needed to successfully build)
     - debian/patches/pool_alloc_sizes.patch: Round up pool alloc sizes for
       alignment (needed to successfully build on armhf)
     - CVE-2018-10887, CVE-2018-10888
Checksums-Sha1: 
 60229e1a214d6ea3c228473cc5ee691d44a2e36c 392144 libgit2-dev_0.19.0-2ubuntu0.4_i386.deb
 4aa343769a095b211859abb6816d5de43a3c3382 249846 libgit2-0_0.19.0-2ubuntu0.4_i386.deb
 673d087931dfd1f423b11ed0ccb121eb06dba05c 888730 libgit2-dbg_0.19.0-2ubuntu0.4_i386.deb
 cbbebfbad811eac2e8f4657bcc937b141723459f 922 libgit2-dev-dbgsym_0.19.0-2ubuntu0.4_i386.ddeb
 e14be85d9c1cd1fa380064aa16bd656c516ab756 892 libgit2-0-dbgsym_0.19.0-2ubuntu0.4_i386.ddeb
Checksums-Sha256: 
 84dfcbaeaae54452da343cdd3cc5fc4412bb736a8c75c3ea6fce6706a266975c 392144 libgit2-dev_0.19.0-2ubuntu0.4_i386.deb
 b2df29a49f48b4d2b0e115ea895fcdeb36e1b4a9a3411e1b82a19d3b90b2f24f 249846 libgit2-0_0.19.0-2ubuntu0.4_i386.deb
 55db6731e2c280f52877bb386c971d8707badafab50e81715ce7a50f13466bf6 888730 libgit2-dbg_0.19.0-2ubuntu0.4_i386.deb
 f431702478ee22856a661ab26ad2c7f2ac0ef1ef8ca447da6e6849c7ae087d84 922 libgit2-dev-dbgsym_0.19.0-2ubuntu0.4_i386.ddeb
 c6f2e2daf627479f7392b48ec403aacc493d5b721b4401ee5f6b902ca0ebf848 892 libgit2-0-dbgsym_0.19.0-2ubuntu0.4_i386.ddeb
Files: 
 0966b73a8dfc8c5a798fd7dd0d205caa 392144 libdevel extra libgit2-dev_0.19.0-2ubuntu0.4_i386.deb
 52a21e314b073880073bec80a3c6f747 249846 libs extra libgit2-0_0.19.0-2ubuntu0.4_i386.deb
 f2dfaacd6196cd26c2078ddbd0b77395 888730 debug extra libgit2-dbg_0.19.0-2ubuntu0.4_i386.deb
 5f641457a4311aa63db7d7879fa79093 922 libdevel extra libgit2-dev-dbgsym_0.19.0-2ubuntu0.4_i386.ddeb
 aafd5794413d2f71fbb8e33f9ee2be40 892 libs extra libgit2-0-dbgsym_0.19.0-2ubuntu0.4_i386.ddeb
Original-Maintainer: Russell Sim <russell.sim@gmail.com>