-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Aug 2026 07:56:57 +0200
Source: libgit2
Binary: libgit2-fixtures
Architecture: all
Version: 1.9.0+ds-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Timo Röhling <roehling@debian.org>
Description:
 libgit2-fixtures - low-level Git library - test suite examples
Closes: 1144465
Changes:
 libgit2 (1.9.0+ds-2+deb13u1) trixie-security; urgency=high
 .
   * Fix CVE-2026-5917: shell command injection in SSH transport
     (Closes: #1144465)
   * Fix CVE-2026-53583: inverted cert validity check for IP addresses
   * Fix CVE-2026-53584: unsanitized submodule paths
   * Fix CVE-2026-53585: limit pack object size to 2GiB
   * Fix CVE-2026-53586: pass correct hostname to auth layer after redirect
   * Fix CVE-2026-53587: read buffer overflow in capability check
Checksums-Sha1:
 81109afbf911eb34f55a107c54187d8895f94908 2652456 libgit2-fixtures_1.9.0+ds-2+deb13u1_all.deb
 6638c392159561bab4238cda175a35f7b86334c4 7762 libgit2_1.9.0+ds-2+deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 8d3339840605eef30c52c4d7fda82e4ce083b23fe40a294157674c1a165fdd36 2652456 libgit2-fixtures_1.9.0+ds-2+deb13u1_all.deb
 ab0f45da0b38bcb50b88ad6df3dc8498869f42fe18094ad35531c388fdbbdd88 7762 libgit2_1.9.0+ds-2+deb13u1_all-buildd.buildinfo
Files:
 355b67508d3028893f3019474733448e 2652456 libs optional libgit2-fixtures_1.9.0+ds-2+deb13u1_all.deb
 6a8f0241671a637f8fd6ec26dceb87e3 7762 libs optional libgit2_1.9.0+ds-2+deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=OaCz
-----END PGP SIGNATURE-----