-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 20 Aug 2026 07:56:57 +0200
Source: libgit2
Binary: libgit2-1.9 libgit2-1.9-dbgsym libgit2-dev
Architecture: riscv64
Version: 1.9.0+ds-2+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-02) <buildd_riscv64-rv-osuosl-02@buildd.debian.org>
Changed-By: Timo Röhling <roehling@debian.org>
Description:
 libgit2-1.9 - low-level Git library
 libgit2-dev - low-level Git library (development files)
Closes: 1144465
Changes:
 libgit2 (1.9.0+ds-2+deb13u1) trixie-security; urgency=high
 .
   * Fix CVE-2026-5917: shell command injection in SSH transport
     (Closes: #1144465)
   * Fix CVE-2026-53583: inverted cert validity check for IP addresses
   * Fix CVE-2026-53584: unsanitized submodule paths
   * Fix CVE-2026-53585: limit pack object size to 2GiB
   * Fix CVE-2026-53586: pass correct hostname to auth layer after redirect
   * Fix CVE-2026-53587: read buffer overflow in capability check
Checksums-Sha1:
 fd54167d20b52bde3221c72bda803c332eae27fa 1811720 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_riscv64.deb
 5765d6b27664bf6ba9c2571fc4258e84a89f25dc 581632 libgit2-1.9_1.9.0+ds-2+deb13u1_riscv64.deb
 11b960636edb920de71f57bf3c3a6b42bae41131 1861900 libgit2-dev_1.9.0+ds-2+deb13u1_riscv64.deb
 97904112f7d5306faf44c95abd2db5dd21729550 8327 libgit2_1.9.0+ds-2+deb13u1_riscv64-buildd.buildinfo
Checksums-Sha256:
 69df5d1b1fa0376110a6021670c6d072fea95af84430ecbbe8900465b9e1da8d 1811720 libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_riscv64.deb
 863fe7379bf08acb5be916c12dbeb734d27ce9fc81a331d03bec0b2e54994957 581632 libgit2-1.9_1.9.0+ds-2+deb13u1_riscv64.deb
 5d8a364a5e25ddd02a5376362042bace3886426bb5dbbcad1fca63b422d0cb17 1861900 libgit2-dev_1.9.0+ds-2+deb13u1_riscv64.deb
 d9be9d702f4b25b41eb855112dce86f27b7380ccbabe6347f1e0ce223483301f 8327 libgit2_1.9.0+ds-2+deb13u1_riscv64-buildd.buildinfo
Files:
 8f022c6a5f048c555eaaa1b7686e0c97 1811720 debug optional libgit2-1.9-dbgsym_1.9.0+ds-2+deb13u1_riscv64.deb
 34c541175ccf9b43213016c7c412b436 581632 libs optional libgit2-1.9_1.9.0+ds-2+deb13u1_riscv64.deb
 bbbe7b30e76524221e5a4cc0bd7586c3 1861900 libdevel optional libgit2-dev_1.9.0+ds-2+deb13u1_riscv64.deb
 a3a2609705e018a1ad7ee64865bb8520 8327 libs optional libgit2_1.9.0+ds-2+deb13u1_riscv64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=sa5P
-----END PGP SIGNATURE-----