-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Aug 2026 07:56:57 +0200
Source: libgit2
Binary: libgit2-1.9 libgit2-1.9-dbgsym libgit2-dev
Architecture: armhf
Version: 1.9.0+ds-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Timo Röhling <roehling@debian.org>
Description:
 libgit2-1.9 - low-level Git library
 libgit2-dev - low-level Git library (development files)
Closes: 1144465
Changes:
 libgit2 (1.9.0+ds-2+deb13u1) trixie-security; urgency=high
 .
   * Fix CVE-2026-5917: shell command injection in SSH transport
     (Closes: #1144465)
   * Fix CVE-2026-53583: inverted cert validity check for IP addresses
   * Fix CVE-2026-53584: unsanitized submodule paths
   * Fix CVE-2026-53585: limit pack object size to 2GiB
   * Fix CVE-2026-53586: pass correct hostname to auth layer after redirect
   * Fix CVE-2026-53587: read buffer overflow in capability check
Checksums-Sha1:
 ca267a14ead5a9315a59c08ebcd9c5bf2849b133 1896268 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_armhf.deb
 ceacdd193c6ddca3c30513f642857aaca16183e4 481272 libgit2-1.9_1.9.0+ds-2+deb13u1_armhf.deb
 d57ba222c3219fac7d5c012c54ea72a17870ff37 793904 libgit2-dev_1.9.0+ds-2+deb13u1_armhf.deb
 2359377493bfa80e1de5406b8ae4661a4a8c2494 8240 libgit2_1.9.0+ds-2+deb13u1_armhf-buildd.buildinfo
Checksums-Sha256:
 44e6d97357c061f14faffc7d8887ae6d8b124c45f6fc867f51b01a0dbff9650b 1896268 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_armhf.deb
 d9a840bd736f4f8672e82278fb5fe1cd2dd208d07d4cc0252e0ef0565f74b732 481272 libgit2-1.9_1.9.0+ds-2+deb13u1_armhf.deb
 d8e0dc143c74de701e37efa325a859b569b8a7b7c550c7869badfe37f0f393a7 793904 libgit2-dev_1.9.0+ds-2+deb13u1_armhf.deb
 207d3f6a8b49b437420591974a9b0aa77b3e227794a52e5b3612031ebecb16b1 8240 libgit2_1.9.0+ds-2+deb13u1_armhf-buildd.buildinfo
Files:
 14a100afd9eee0f0f7f4d9247d4388d9 1896268 debug optional libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_armhf.deb
 f79f3f8aa93d2e093c83996f2e73fe0d 481272 libs optional libgit2-1.9_1.9.0+ds-2+deb13u1_armhf.deb
 729855bf86ace4d466cccae42bc68efb 793904 libdevel optional libgit2-dev_1.9.0+ds-2+deb13u1_armhf.deb
 fad22bf793e4dce9326ee9d1a66f87dd 8240 libs optional libgit2_1.9.0+ds-2+deb13u1_armhf-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEBOUsBrtd5lcy6oRfutMAkCxKbL0FAmqGoV0ACgkQutMAkCxK
bL2aBQ//SU9cSH9nhnCBR6ECM7whLuEGPa3/YirD8cAAPO/3CpNKaWJbJh+l5H2O
kiVvqG2BspueGh58dy8iLPC09TKev+k+Q5NRVsFcMCjkDnFSS7YxxGQn1T7vat+6
vrXIR2TOg1xu9Hx1rJmo4OuPvN8oLdyzhoQ8qGYmiCPKdKNULSDdt3FC9J1r2+As
zxZ8e4mcxb5RI9kdKEiw2zJfq/HxAu5mrEh+PMc35TMtzxaMVn0E8to6RT8qZv8B
AG8sWOkOcFTpd18CcPO7ZcNt6lrHcyt0zlXYf5s9fr/4kWd0leuZT4r9P+ep7IbT
cYHMZtO7FFiTyPVp5sMB+ModJ5v6qZ3ems4/94cwT0bE7OGE6PBbe8w3Wqovq5yA
1RQJJgCzJrqOMfPQBiPXyx92aAzigxhI4OjOz8vtYaVsbWyGXQrBXzVKNug/8c5a
kSAAaqH0L5IfvOWO2tQdcM/yk4xIO8//vqiR9grCEi8tp6j9TwBqxi7acuIYwioQ
uDY1rBrtkBYvb8Q6DSU/8RQrw0cdUFUmvAbj4L6HB5Rt74y0m4TeTiyfc5nAq+Gx
nqC6M4J+E77h/L6zXgEd6a3/r/LqfZmBmgiDbQzK96ld2DQtSuaJx0nqW9d+lza4
yUHMfD+Y5DaY53jmJmutQYV4w9fXiwM+G+sveXnBSixhfSy7Dlo=
=jC68
-----END PGP SIGNATURE-----