-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Aug 2026 07:56:57 +0200
Source: libgit2
Binary: libgit2-1.9 libgit2-1.9-dbgsym libgit2-dev
Architecture: arm64
Version: 1.9.0+ds-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Timo Röhling <roehling@debian.org>
Description:
 libgit2-1.9 - low-level Git library
 libgit2-dev - low-level Git library (development files)
Closes: 1144465
Changes:
 libgit2 (1.9.0+ds-2+deb13u1) trixie-security; urgency=high
 .
   * Fix CVE-2026-5917: shell command injection in SSH transport
     (Closes: #1144465)
   * Fix CVE-2026-53583: inverted cert validity check for IP addresses
   * Fix CVE-2026-53584: unsanitized submodule paths
   * Fix CVE-2026-53585: limit pack object size to 2GiB
   * Fix CVE-2026-53586: pass correct hostname to auth layer after redirect
   * Fix CVE-2026-53587: read buffer overflow in capability check
Checksums-Sha1:
 c0e4121cf231063f18d4c501020bea8832531518 1896008 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_arm64.deb
 2a57b77742117f544eb010f94ff460b724c880a8 517584 libgit2-1.9_1.9.0+ds-2+deb13u1_arm64.deb
 a7c03bf9882af054f0e5afe1cd7acccf99ee3d0f 852696 libgit2-dev_1.9.0+ds-2+deb13u1_arm64.deb
 de16d146d02f52914739dcb7d8528aab8c750c24 8358 libgit2_1.9.0+ds-2+deb13u1_arm64-buildd.buildinfo
Checksums-Sha256:
 2ec33438dc773bef35dcee7ccabaebfa73140d58ac2ec6bb6045dbc860999436 1896008 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_arm64.deb
 067cf8d040b279c244ce9c9e4b5aa112e628b643dbccb60caa595d91414c4bdf 517584 libgit2-1.9_1.9.0+ds-2+deb13u1_arm64.deb
 35b01f6ccc5fec3f3aca37a746ecdb509160ac2a64ed7fa480b0031e029d9dee 852696 libgit2-dev_1.9.0+ds-2+deb13u1_arm64.deb
 eb97f1b124497f3e9c6eb8b7ad12b5800e01cb51a947c3766f3677705a964285 8358 libgit2_1.9.0+ds-2+deb13u1_arm64-buildd.buildinfo
Files:
 e9bff8b1dcbeedd7c78e78f84173946a 1896008 debug optional libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_arm64.deb
 a86d8e9ee219865d9b8efc52daa2a062 517584 libs optional libgit2-1.9_1.9.0+ds-2+deb13u1_arm64.deb
 3117ab8118b9030923a7df50b4a89a3b 852696 libdevel optional libgit2-dev_1.9.0+ds-2+deb13u1_arm64.deb
 174d536a2b4e6142c92c565d0ca56919 8358 libs optional libgit2_1.9.0+ds-2+deb13u1_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=WPck
-----END PGP SIGNATURE-----