gpp_maybe Security update for libgit2

SUSE-SLE-Module-Development-Tools-15-SP6-2024-2584

This update for libgit2 fixes the following issues: Update to 1.7.2: Security fixes: - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660) - CVE-2024-24575: Fixed potential infinite loop condition in git_revparse_single() (bsc#1219664) Other fixes: - A bug in the smart transport negotiation could have caused an out-of-bounds read when a remote server did not advertise capabilities.

• Release Date
  Jul 22 2024
• References
  Bugzilla: 1219660, 1219664
  CVEs: CVE-2024-24577, CVE-2024-24575
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.6 s390x

• Packages
  libgit2
  C git library

  1.7.2-150600.3.3.1 lock src

  libgit2-1_7
  C git library

  1.7.2-150600.3.3.1 lock rpm

  libgit2-devel
  C git library

  1.7.2-150600.3.3.1 lock rpm

  libgit2-tools
  A Git command-line interface based on libgit2

  1.7.2-150600.3.3.1 lock rpm

Development Tools Module 15.6 ppc64le

• Packages
  libgit2
  C git library

  1.7.2-150600.3.3.1 lock src

  libgit2-1_7
  C git library

  1.7.2-150600.3.3.1 lock rpm

  libgit2-devel
  C git library

  1.7.2-150600.3.3.1 lock rpm

  libgit2-tools
  A Git command-line interface based on libgit2

  1.7.2-150600.3.3.1 lock rpm

Development Tools Module 15.6 aarch64

• Packages
  libgit2
  C git library

  1.7.2-150600.3.3.1 lock src

  libgit2-1_7
  C git library

  1.7.2-150600.3.3.1 lock rpm

  libgit2-devel
  C git library

  1.7.2-150600.3.3.1 lock rpm

  libgit2-tools
  A Git command-line interface based on libgit2

  1.7.2-150600.3.3.1 lock rpm

Development Tools Module 15.6 x86_64

• Packages
  libgit2
  C git library

  1.7.2-150600.3.3.1 lock src

  libgit2-1_7
  C git library

  1.7.2-150600.3.3.1 lock rpm

  libgit2-devel
  C git library

  1.7.2-150600.3.3.1 lock rpm

  libgit2-tools
  A Git command-line interface based on libgit2

  1.7.2-150600.3.3.1 lock rpm