Received: by mail.netbsd.org (Postfix, from userid 605) id 31D8E84DC1; Mon, 7 Oct 2019 09:14:49 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id AD6C084DC0 for ; Mon, 7 Oct 2019 09:14:48 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id x97aDXVgxqif for ; Mon, 7 Oct 2019 09:14:48 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.NetBSD.org [IPv6:2001:470:a085:999:28c:faff:fe03:5984]) by mail.netbsd.org (Postfix) with ESMTP id 2C1E384D75 for ; Mon, 7 Oct 2019 09:14:48 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 25ACFFBF4; Mon, 7 Oct 2019 09:14:48 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1570439688270990" MIME-Version: 1.0 Date: Mon, 7 Oct 2019 09:14:48 +0000 From: "Benny Siegert" Subject: CVS commit: [pkgsrc-2019Q3] pkgsrc/devel/libgit2 To: pkgsrc-changes@NetBSD.org Reply-To: bsiegert@netbsd.org X-Mailer: log_accum Message-Id: <20191007091448.25ACFFBF4@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1570439688270990 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: bsiegert Date: Mon Oct 7 09:14:48 UTC 2019 Modified Files: pkgsrc/devel/libgit2 [pkgsrc-2019Q3]: Makefile distinfo Log Message: Pullup ticket #6068 - requested by nia devel/libgit2: security fix Revisions pulled up: - devel/libgit2/Makefile 1.40 - devel/libgit2/distinfo 1.18 --- Module Name: pkgsrc Committed By: nia Date: Sun Oct 6 12:18:30 UTC 2019 Modified Files: pkgsrc/devel/libgit2: Makefile distinfo Log Message: libgit2: Update to 0.28.3 This is a security release fixing the following issues: A carefully constructed commit object with a very large number of parents may lead to potential out-of-bounds writes or potential denial of service. The ProgramData configuration file is always read for compatibility with Git for Windows and Portable Git installations. The ProgramData location is not necessarily writable only by administrators, so we now ensure that the configuration file is owned by the administrator or the current user. To generate a diff of this commit: cvs rdiff -u -r1.39 -r1.39.2.1 pkgsrc/devel/libgit2/Makefile cvs rdiff -u -r1.17 -r1.17.4.1 pkgsrc/devel/libgit2/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1570439688270990 Content-Disposition: inline Content-Length: 1669 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/devel/libgit2/Makefile diff -u pkgsrc/devel/libgit2/Makefile:1.39 pkgsrc/devel/libgit2/Makefile:1.39.2.1 --- pkgsrc/devel/libgit2/Makefile:1.39 Thu Aug 22 12:23:02 2019 +++ pkgsrc/devel/libgit2/Makefile Mon Oct 7 09:14:47 2019 @@ -1,7 +1,6 @@ -# $NetBSD: Makefile,v 1.39 2019/08/22 12:23:02 ryoon Exp $ +# $NetBSD: Makefile,v 1.39.2.1 2019/10/07 09:14:47 bsiegert Exp $ -DISTNAME= libgit2-0.28.2 -PKGREVISION= 3 +DISTNAME= libgit2-0.28.3 CATEGORIES= devel MASTER_SITES= ${MASTER_SITE_GITHUB:=libgit2/} GITHUB_TAG= v${PKGVERSION_NOREV} Index: pkgsrc/devel/libgit2/distinfo diff -u pkgsrc/devel/libgit2/distinfo:1.17 pkgsrc/devel/libgit2/distinfo:1.17.4.1 --- pkgsrc/devel/libgit2/distinfo:1.17 Mon May 27 14:35:25 2019 +++ pkgsrc/devel/libgit2/distinfo Mon Oct 7 09:14:47 2019 @@ -1,6 +1,6 @@ -$NetBSD: distinfo,v 1.17 2019/05/27 14:35:25 wiz Exp $ +$NetBSD: distinfo,v 1.17.4.1 2019/10/07 09:14:47 bsiegert Exp $ -SHA1 (libgit2-0.28.2.tar.gz) = 85025d651696a83c4d2a45932235ed1146c95cbc -RMD160 (libgit2-0.28.2.tar.gz) = 18fbe97266d064b8857618066e156a4297fbcff4 -SHA512 (libgit2-0.28.2.tar.gz) = 0879c162e2e1dc00eadfbda22cd1f9d3a95b4ec2b653c108983f37c2f695140882de4d50d7cbc04ced247125a4e9fe6df16130e1267891aecdb2411d920db5c6 -Size (libgit2-0.28.2.tar.gz) = 4987586 bytes +SHA1 (libgit2-0.28.3.tar.gz) = fb3c394b36e17ebb2cea42a2c407e899f90509a9 +RMD160 (libgit2-0.28.3.tar.gz) = 76e988d9229a58ff9f1e39e33a33317cb806f33e +SHA512 (libgit2-0.28.3.tar.gz) = 15444823b7d4885f7b8c3982f8905efc4a75913de016a9b2e0a24d5ce9746e6a549dffd5469036529557feff2ce7ece9328266eb312c80b96091ce0f65ee97ee +Size (libgit2-0.28.3.tar.gz) = 4988580 bytes --_----------=_1570439688270990--