[pkgsrc/pkgsrc-2019Q3]: pkgsrc/devel/libgit2 Pullup ticket #6068 - requested ...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/cb08e1c13118
branches:  pkgsrc-2019Q3
changeset: 340753:cb08e1c13118
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Mon Oct 07 09:14:47 2019 +0000

description:
Pullup ticket #6068 - requested by nia
devel/libgit2: security fix

Revisions pulled up:
- devel/libgit2/Makefile                                        1.40
- devel/libgit2/distinfo                                        1.18

---
   Module Name: pkgsrc
   Committed By:        nia
   Date:                Sun Oct  6 12:18:30 UTC 2019

   Modified Files:
        pkgsrc/devel/libgit2: Makefile distinfo

   Log Message:
   libgit2: Update to 0.28.3

   This is a security release fixing the following issues:

       A carefully constructed commit object with a very large number
       of parents may lead to potential out-of-bounds writes or
       potential denial of service.

       The ProgramData configuration file is always read for compatibility
       with Git for Windows and Portable Git installations. The ProgramData
       location is not necessarily writable only by administrators, so we
       now ensure that the configuration file is owned by the administrator
       or the current user.

diffstat:

 devel/libgit2/Makefile |   5 ++---
 devel/libgit2/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (28 lines):

diff -r 867f9fe06a9c -r cb08e1c13118 devel/libgit2/Makefile
--- a/devel/libgit2/Makefile    Mon Oct 07 08:56:28 2019 +0000
+++ b/devel/libgit2/Makefile    Mon Oct 07 09:14:47 2019 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.39 2019/08/22 12:23:02 ryoon Exp $
+# $NetBSD: Makefile,v 1.39.2.1 2019/10/07 09:14:47 bsiegert Exp $
 
-DISTNAME=      libgit2-0.28.2
-PKGREVISION=   3
+DISTNAME=      libgit2-0.28.3
 CATEGORIES=    devel
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=libgit2/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}
diff -r 867f9fe06a9c -r cb08e1c13118 devel/libgit2/distinfo
--- a/devel/libgit2/distinfo    Mon Oct 07 08:56:28 2019 +0000
+++ b/devel/libgit2/distinfo    Mon Oct 07 09:14:47 2019 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.17 2019/05/27 14:35:25 wiz Exp $
+$NetBSD: distinfo,v 1.17.4.1 2019/10/07 09:14:47 bsiegert Exp $
 
-SHA1 (libgit2-0.28.2.tar.gz) = 85025d651696a83c4d2a45932235ed1146c95cbc
-RMD160 (libgit2-0.28.2.tar.gz) = 18fbe97266d064b8857618066e156a4297fbcff4
-SHA512 (libgit2-0.28.2.tar.gz) = 0879c162e2e1dc00eadfbda22cd1f9d3a95b4ec2b653c108983f37c2f695140882de4d50d7cbc04ced247125a4e9fe6df16130e1267891aecdb2411d920db5c6
-Size (libgit2-0.28.2.tar.gz) = 4987586 bytes
+SHA1 (libgit2-0.28.3.tar.gz) = fb3c394b36e17ebb2cea42a2c407e899f90509a9
+RMD160 (libgit2-0.28.3.tar.gz) = 76e988d9229a58ff9f1e39e33a33317cb806f33e
+SHA512 (libgit2-0.28.3.tar.gz) = 15444823b7d4885f7b8c3982f8905efc4a75913de016a9b2e0a24d5ce9746e6a549dffd5469036529557feff2ce7ece9328266eb312c80b96091ce0f65ee97ee
+Size (libgit2-0.28.3.tar.gz) = 4988580 bytes