-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Aug 2026 07:56:57 +0200
Source: libgit2
Binary: libgit2-1.9 libgit2-1.9-dbgsym libgit2-dev
Architecture: s390x
Version: 1.9.0+ds-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Timo Röhling <roehling@debian.org>
Description:
 libgit2-1.9 - low-level Git library
 libgit2-dev - low-level Git library (development files)
Closes: 1144465
Changes:
 libgit2 (1.9.0+ds-2+deb13u1) trixie-security; urgency=high
 .
   * Fix CVE-2026-5917: shell command injection in SSH transport
     (Closes: #1144465)
   * Fix CVE-2026-53583: inverted cert validity check for IP addresses
   * Fix CVE-2026-53584: unsanitized submodule paths
   * Fix CVE-2026-53585: limit pack object size to 2GiB
   * Fix CVE-2026-53586: pass correct hostname to auth layer after redirect
   * Fix CVE-2026-53587: read buffer overflow in capability check
Checksums-Sha1:
 2e2bfc82d00f87cfa047e84103cf089270a7252d 1921660 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_s390x.deb
 37cc644d73192e0fe4e0f993ba8806eaebc9123c 528352 libgit2-1.9_1.9.0+ds-2+deb13u1_s390x.deb
 a2e9839e280be85b21588519be93254e446aa819 829420 libgit2-dev_1.9.0+ds-2+deb13u1_s390x.deb
 6417b266c1413a43cbb797884f7d871b02d1b6b9 8236 libgit2_1.9.0+ds-2+deb13u1_s390x-buildd.buildinfo
Checksums-Sha256:
 b85789d0b54dbeecddc6f02d05690b58ea08ee2c0881392f7dd8510b62f969b0 1921660 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_s390x.deb
 5bc152404b9c2142b1bbb2a6df9c243ebb4eb9aaee2c5fb67585e39b3c1ff224 528352 libgit2-1.9_1.9.0+ds-2+deb13u1_s390x.deb
 9d9cdc4bee0c098b3d9c33b2a38a3e70433ee27755251c36e4e84b6dc5728245 829420 libgit2-dev_1.9.0+ds-2+deb13u1_s390x.deb
 866e834d16cb1d1b55717d2ad5e4cb4b3dec82a704f0747961f77b0afcfabb8b 8236 libgit2_1.9.0+ds-2+deb13u1_s390x-buildd.buildinfo
Files:
 34517b4ea652ac2cf1f591e56d51978c 1921660 debug optional libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_s390x.deb
 9efabe98d9566dc0cc3b56db0d7f34f4 528352 libs optional libgit2-1.9_1.9.0+ds-2+deb13u1_s390x.deb
 24223ad36e752e8332a734d98735e90f 829420 libdevel optional libgit2-dev_1.9.0+ds-2+deb13u1_s390x.deb
 cb13207478c9bad2df7d5cbee61918a3 8236 libs optional libgit2_1.9.0+ds-2+deb13u1_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=1qAq
-----END PGP SIGNATURE-----