-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Aug 2026 07:56:57 +0200
Source: libgit2
Binary: libgit2-1.9 libgit2-1.9-dbgsym libgit2-dev
Architecture: ppc64el
Version: 1.9.0+ds-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-conova-02) <buildd_ppc64el-ppc64el-conova-02@buildd.debian.org>
Changed-By: Timo Röhling <roehling@debian.org>
Description:
 libgit2-1.9 - low-level Git library
 libgit2-dev - low-level Git library (development files)
Closes: 1144465
Changes:
 libgit2 (1.9.0+ds-2+deb13u1) trixie-security; urgency=high
 .
   * Fix CVE-2026-5917: shell command injection in SSH transport
     (Closes: #1144465)
   * Fix CVE-2026-53583: inverted cert validity check for IP addresses
   * Fix CVE-2026-53584: unsanitized submodule paths
   * Fix CVE-2026-53585: limit pack object size to 2GiB
   * Fix CVE-2026-53586: pass correct hostname to auth layer after redirect
   * Fix CVE-2026-53587: read buffer overflow in capability check
Checksums-Sha1:
 0b30cb090c7936aceef93e0d130512531748ed82 1975728 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_ppc64el.deb
 1f8d2cdf57e6bb83661dbaf31a18c32ce960b683 607844 libgit2-1.9_1.9.0+ds-2+deb13u1_ppc64el.deb
 db2c28df2a97a04b16529d92efd57114c362aa25 946624 libgit2-dev_1.9.0+ds-2+deb13u1_ppc64el.deb
 a0380352876e14f40073d1590b6e745095ea986f 8379 libgit2_1.9.0+ds-2+deb13u1_ppc64el-buildd.buildinfo
Checksums-Sha256:
 bdb0de7d7d4864cd4f482bf6f926e55590f58d53e809c251684348e7f12febc4 1975728 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_ppc64el.deb
 36814c9a9e0ffc76dfd6d554311aababa61d04493d8468d530d738209640b865 607844 libgit2-1.9_1.9.0+ds-2+deb13u1_ppc64el.deb
 11f716a6abc0599adfbe1b86f7e84811e1290b7f086e923e99fd82a7c64f5457 946624 libgit2-dev_1.9.0+ds-2+deb13u1_ppc64el.deb
 f3768f39ff800c566ae5241dd8fc2fe8c7aad4695ad8e4139c4a5c3068ca3cee 8379 libgit2_1.9.0+ds-2+deb13u1_ppc64el-buildd.buildinfo
Files:
 75568659735e3ff65e85f2750cbb9e54 1975728 debug optional libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_ppc64el.deb
 efc2cf791bf75f47859a0881ecafaacb 607844 libs optional libgit2-1.9_1.9.0+ds-2+deb13u1_ppc64el.deb
 140c055986b57970087125cd6f9b01f1 946624 libdevel optional libgit2-dev_1.9.0+ds-2+deb13u1_ppc64el.deb
 2aa60b0807432e87dfae7b801f731cb3 8379 libs optional libgit2_1.9.0+ds-2+deb13u1_ppc64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=jobV
-----END PGP SIGNATURE-----