-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Aug 2026 07:56:57 +0200
Source: libgit2
Binary: libgit2-1.9 libgit2-1.9-dbgsym libgit2-dev
Architecture: armel
Version: 1.9.0+ds-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Timo Röhling <roehling@debian.org>
Description:
 libgit2-1.9 - low-level Git library
 libgit2-dev - low-level Git library (development files)
Closes: 1144465
Changes:
 libgit2 (1.9.0+ds-2+deb13u1) trixie-security; urgency=high
 .
   * Fix CVE-2026-5917: shell command injection in SSH transport
     (Closes: #1144465)
   * Fix CVE-2026-53583: inverted cert validity check for IP addresses
   * Fix CVE-2026-53584: unsanitized submodule paths
   * Fix CVE-2026-53585: limit pack object size to 2GiB
   * Fix CVE-2026-53586: pass correct hostname to auth layer after redirect
   * Fix CVE-2026-53587: read buffer overflow in capability check
Checksums-Sha1:
 aec3e7675217128a8f9573811fd76be7e05043a9 1875632 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_armel.deb
 ebb2b00d9cb8f6759fb26a432e177f4be12fa948 470360 libgit2-1.9_1.9.0+ds-2+deb13u1_armel.deb
 1ff0a513146c05370e3d003b2f8f10b692d1d0b8 785480 libgit2-dev_1.9.0+ds-2+deb13u1_armel.deb
 19311cb4d5c35f85d17de3f4909ee34fc246e194 8226 libgit2_1.9.0+ds-2+deb13u1_armel-buildd.buildinfo
Checksums-Sha256:
 a56ce19413d20f12aa69f4156b4f4b9887481c4f53c9629606af60a705f9036f 1875632 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_armel.deb
 dac712f7e3051fd69b2525dbeb500c8de43c96d3ba4172c32cfbafe5619416f9 470360 libgit2-1.9_1.9.0+ds-2+deb13u1_armel.deb
 6d4aba2794c367dcc78b683e3086becafb2ed3e0799b7fa7d71990127e01ed51 785480 libgit2-dev_1.9.0+ds-2+deb13u1_armel.deb
 a504e69ca41fa4612acd52bf2030c4339de03a4c293e9aaca2eda92a9b9d1248 8226 libgit2_1.9.0+ds-2+deb13u1_armel-buildd.buildinfo
Files:
 6c7d36a3c846a2c88b1b0c28c460281d 1875632 debug optional libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_armel.deb
 e442d24813450cc3c3b600f5e9d57cbd 470360 libs optional libgit2-1.9_1.9.0+ds-2+deb13u1_armel.deb
 c184224320ec66091764f833013c61c9 785480 libdevel optional libgit2-dev_1.9.0+ds-2+deb13u1_armel.deb
 ac07adfedf981bf6daba641364818a33 8226 libs optional libgit2_1.9.0+ds-2+deb13u1_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=S9vs
-----END PGP SIGNATURE-----