CVS commit: [pkgsrc-2019Q3] pkgsrc/devel/libgit2

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Mon Oct  7 09:14:48 UTC 2019

Modified Files:
        pkgsrc/devel/libgit2 [pkgsrc-2019Q3]: Makefile distinfo

Log Message:
Pullup ticket #6068 - requested by nia
devel/libgit2: security fix

Revisions pulled up:
- devel/libgit2/Makefile                                        1.40
- devel/libgit2/distinfo                                        1.18

---
   Module Name: pkgsrc
   Committed By:        nia
   Date:                Sun Oct  6 12:18:30 UTC 2019

   Modified Files:
        pkgsrc/devel/libgit2: Makefile distinfo

   Log Message:
   libgit2: Update to 0.28.3

   This is a security release fixing the following issues:

       A carefully constructed commit object with a very large number
       of parents may lead to potential out-of-bounds writes or
       potential denial of service.

       The ProgramData configuration file is always read for compatibility
       with Git for Windows and Portable Git installations. The ProgramData
       location is not necessarily writable only by administrators, so we
       now ensure that the configuration file is owned by the administrator
       or the current user.


To generate a diff of this commit:
cvs rdiff -u -r1.39 -r1.39.2.1 pkgsrc/devel/libgit2/Makefile
cvs rdiff -u -r1.17 -r1.17.4.1 pkgsrc/devel/libgit2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/libgit2/Makefile
diff -u pkgsrc/devel/libgit2/Makefile:1.39 pkgsrc/devel/libgit2/Makefile:1.39.2.1
--- pkgsrc/devel/libgit2/Makefile:1.39  Thu Aug 22 12:23:02 2019
+++ pkgsrc/devel/libgit2/Makefile       Mon Oct  7 09:14:47 2019
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.39 2019/08/22 12:23:02 ryoon Exp $
+# $NetBSD: Makefile,v 1.39.2.1 2019/10/07 09:14:47 bsiegert Exp $
 
-DISTNAME=      libgit2-0.28.2
-PKGREVISION=   3
+DISTNAME=      libgit2-0.28.3
 CATEGORIES=    devel
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=libgit2/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}

Index: pkgsrc/devel/libgit2/distinfo
diff -u pkgsrc/devel/libgit2/distinfo:1.17 pkgsrc/devel/libgit2/distinfo:1.17.4.1
--- pkgsrc/devel/libgit2/distinfo:1.17  Mon May 27 14:35:25 2019
+++ pkgsrc/devel/libgit2/distinfo       Mon Oct  7 09:14:47 2019
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.17 2019/05/27 14:35:25 wiz Exp $
+$NetBSD: distinfo,v 1.17.4.1 2019/10/07 09:14:47 bsiegert Exp $
 
-SHA1 (libgit2-0.28.2.tar.gz) = 85025d651696a83c4d2a45932235ed1146c95cbc
-RMD160 (libgit2-0.28.2.tar.gz) = 18fbe97266d064b8857618066e156a4297fbcff4
-SHA512 (libgit2-0.28.2.tar.gz) = 0879c162e2e1dc00eadfbda22cd1f9d3a95b4ec2b653c108983f37c2f695140882de4d50d7cbc04ced247125a4e9fe6df16130e1267891aecdb2411d920db5c6
-Size (libgit2-0.28.2.tar.gz) = 4987586 bytes
+SHA1 (libgit2-0.28.3.tar.gz) = fb3c394b36e17ebb2cea42a2c407e899f90509a9
+RMD160 (libgit2-0.28.3.tar.gz) = 76e988d9229a58ff9f1e39e33a33317cb806f33e
+SHA512 (libgit2-0.28.3.tar.gz) = 15444823b7d4885f7b8c3982f8905efc4a75913de016a9b2e0a24d5ce9746e6a549dffd5469036529557feff2ce7ece9328266eb312c80b96091ce0f65ee97ee
+Size (libgit2-0.28.3.tar.gz) = 4988580 bytes