it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
- From: Moritz Muehlenhoff <jmm AT debian.org>
- To: debian-security-announce AT lists.debian.org
- Subject: [IT-SecNots] [SECURITY] [DSA 5619-1] libgit2 security update
- Date: Fri, 9 Feb 2024 19:15:45 +0000
- List-archive: https://lists.debian.org/msgid-search/ZcZ54U/n6ViLx57Z AT seger.debian.org
- List-id: <debian-security-announce.lists.debian.org>
- List-url: <http://lists.debian.org/debian-security-announce/>
- Old-dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.seger; h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date :Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: In-Reply-To:References; bh=UBkcBu9WfB7UahTnVIJA3npU0hTMaqw1m/vY6uv3AUQ=; b=Fp 0RCLz+6aCg9ZUNdhrXlyX5yWEf3wFkTOHRUcbvbstlhFy4bV4cxe1e+OF9jeWcTC+0Vy75ZtRgiXv JflHkE8JgSasl7r0patQWIZ91hkRqz0J84VxRpxWASQXXOiCVwk/XcraS66geise/5QGY1PGV3A41 LsR7xcTfongL1/vojkjjCRGbDOWlatZAfAKYrAhXZBFixyRMmFB5HEYxWQ7kKO/KqyMYhcprkNlcv ehsT1ITFEuV9ly1IG81I1GJq+Lu7Mdj1NEG3/AKp/h/cYdNfkXENdg32Ey6ApdXtBal6TGB/VHrs8 lHEv2s5bwexb3bse6WOI12W4Ki0HhRcA==;
- Old-return-path: <jmm AT seger.debian.org>
- Priority: urgent
- Resent-date: Fri, 9 Feb 2024 19:16:16 +0000 (UTC)
- Resent-from: debian-security-announce AT lists.debian.org
- Resent-message-id: <ThbmTfXCeGB.A.VgB.AonxlB@bendel>
- Resent-sender: debian-security-announce-request AT lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
- -------------------------------------------------------------------------
Debian Security Advisory DSA-5619-1 security AT debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
February 09, 2024 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : libgit2
CVE ID : CVE-2024-24577 CVE-2024-24575
Two vulnerabilities were discovered in libgit2, a low-level Git library,
which may result in denial of service or potentially the execution of
arbitrary code.
For the oldstable distribution (bullseye), this problem has been fixed
in version 1.1.0+dfsg.1-4+deb11u2.
For the stable distribution (bookworm), this problem has been fixed in
version 1.5.1+ds-1+deb12u1.
We recommend that you upgrade your libgit2 packages.
For the detailed security status of libgit2 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libgit2
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce AT lists.debian.org
-----BEGIN PGP SIGNATURE-----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=ixWD
-----END PGP SIGNATURE-----
- [IT-SecNots] [SECURITY] [DSA 5619-1] libgit2 security update, Moritz Muehlenhoff, 09.02.2024
Archiv bereitgestellt durch MHonArc 2.6.19+.