---
- branch: MAIN
  date: Sun Oct  6 12:18:30 UTC 2019
  files:
  - new: '1.40'
    old: '1.39'
    path: pkgsrc/devel/libgit2/Makefile
    pathrev: pkgsrc/devel/libgit2/Makefile@1.40
    type: modified
  - new: '1.18'
    old: '1.17'
    path: pkgsrc/devel/libgit2/distinfo
    pathrev: pkgsrc/devel/libgit2/distinfo@1.18
    type: modified
  id: 20191006T121830Z.0ba9b09aaa1cfd2d72a2638e6ae21144dc22511d
  log: |
    libgit2: Update to 0.28.3

    This is a security release fixing the following issues:

        A carefully constructed commit object with a very large number
        of parents may lead to potential out-of-bounds writes or
        potential denial of service.

        The ProgramData configuration file is always read for compatibility
        with Git for Windows and Portable Git installations. The ProgramData
        location is not necessarily writable only by administrators, so we
        now ensure that the configuration file is owned by the administrator
        or the current user.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/devel/libgit2'
  unixtime: '1570364310'
  user: nia