libgit2 (0.21.1-3+deb8u2) jessie-security; urgency=medium

  * Non-maintainer upload by the ELTS Team.
  * Update patches for CVE-2018-10887 and CVE-2018-10888
    - Fix -Wimplicit-function-declaration and
      -Wincompatible-pointer-types.
  * Backport and apply upstream patches:
    - CVE-2016-8568, CVE-2016-8569: NULL pointer dereference and read
      out-of-bounds caused by incorrect object parsing code.
    - CVE-2016-10128: Buffer overflow in Git Smart Protocol parser
    - CVE-2016-10129: NULL pointer dereference in Git Smart Protocol parser
    - CVE-2018-8099: DoS caused by incorrect error returning in index parser
    - CVE-2020-12278: NTFS Alternate Data Stream attacks on Linux
    - CVE-2020-12279: 8.3 "short name" attacks on Linux
    - CVE-2024-24577: Fix edge case in has_dir_name when path starts
      with a slash.
  * Ship resources for the "nasty" test (needed for CVE-2020-12279 fix).
  * Fix revparse test failing due to being very old.

 -- Andrej Shadura <andrewsh@debian.org>  Thu, 30 Jan 2025 09:44:18 +0100

libgit2 (0.21.1-3+deb8u1) jessie-security; urgency=medium

  * Non-maintainer upload by the LTS Team. 
  * CVE-2018-15501
    A potential out-of-bounds read when processing a "ng" smart packet
    might lead to a Denial of Service.
  * CVE-2018-10887
    A flaw has been discovered that may lead to an integer overflow which
    in turn leads to an out of bound read, allowing to read before the
    base object. This might be used to leak memory addresses or cause a
    Denial of Service.
  * CVE-2018-10888
    A flaw may lead to an out-of-bound read while reading a binary delta
    file. This might result in a Denial of Service.
 
 -- Thorsten Alteholz <debian@alteholz.de>  Sat, 25 Jul 2018 15:03:05 +0200

libgit2 (0.21.1-3) jessie; urgency=medium

  * Backported fix for case insensitive filesystems (CVE-2014-9390).
    (Closes: #774048)

 -- Russell Sim <russell.sim@gmail.com>  Tue, 10 Feb 2015 20:29:05 +1100

libgit2 (0.21.1-2.1) jessie; urgency=medium

  * Non-maintainer upload.
  * Use CURDIR instead of PWD to fix the previous upload (Closes: #761539).

 -- Ivo De Decker <ivodd@debian.org>  Thu, 08 Jan 2015 23:51:20 +0100

libgit2 (0.21.1-2) jessie; urgency=medium

  * Fix buildd errors. (Closes: #761539)

 -- Russell Sim <russell.sim@gmail.com>  Sun, 04 Jan 2015 13:13:57 +1100

libgit2 (0.21.1-1) unstable; urgency=medium

  * New upstream release 0.21.1.

 -- Russell Sim <russell.sim@gmail.com>  Wed, 03 Sep 2014 12:41:44 +1000

libgit2 (0.21.0-1) UNRELEASED; urgency=medium

  * New upstream release 0.21.0.
  * debian/copyright: Added new licenses: ICS, CC0.
  * Library name now matches so name version.

 -- Russell Sim <russell.sim@gmail.com>  Sat, 21 Jun 2014 11:19:23 +1000

libgit2 (0.20.0-1) experimental; urgency=medium

  * New upstream release 0.20.0.
  * debian/patches/disable_online_tests.patch: Renamed to
    disable_tests.patch.
  * debian/patches/disable_tests.patch: Disabled blame test.
  * debian/rules: Use automatic dh_makeshlib version dependency.
  * Bumped standards version to 3.9.5 (no change necessary).
  * debian/copyright: Added new licenses: MIT, BSD and PHP

 -- Russell Sim <russell.sim@gmail.com>  Thu, 13 Mar 2014 20:35:39 +1100

libgit2 (0.19.0-2) experimental; urgency=low

  * Added correct dependencies to development package. (Closes: #715173)
  * Standards upgrade to version 3.9.4.
  * Multi-arch support.
  * Manually specified symbols instead of relying on regex.

 -- Russell Sim <russell.sim@gmail.com>  Wed, 20 Aug 2013 22:33:20 +1000

libgit2 (0.19.0-1) experimental; urgency=low

  * Enable threading. (Closes: #700181)

 -- Russell Sim <russell.sim@gmail.com>  Tue, 02 Jul 2013 19:43:00 +1000

libgit2 (0.18.0-2) experimental; urgency=low

  * Disable online tests.
    Thanks to Felix Geyer for the heads up. (Closes: #712300)

 -- Russell Sim <russell.sim@gmail.com>  Mon, 17 Jun 2013 23:11:15 +1000

libgit2 (0.18.0-1) experimental; urgency=low

  [ Russell Sim ]
  * Added examples to dev package.

  [ Carlos Martín Nieto ]
  * Build-Depend on python-minimal instead of -all
  * BUILD_TESTS isn't used in this project

  [ Russell Sim ]
  * New upstream release 0.18.0.

 -- Russell Sim <russell.sim@gmail.com>  Tue, 30 Apr 2013 00:55:09 +1000

libgit2 (0.17.0-1) experimental; urgency=low

  * New Upstream Release.
  * debian/patches/build_static.patch: Enables building as both
    static and dynamic library.
  * debian/rules: Added CMAKE_BUILD_TYPE=RelWithDebInfo to rules file.
  * debian/compat: Updated to 9, adds support for hardening.

 -- Russell Sim <russell.sim@gmail.com>  Sun, 20 May 2012 21:34:12 +1000

libgit2 (0.16.0-1) experimental; urgency=low

  * Initial release (Closes: #614517)

 -- Russell Sim <russell.sim@gmail.com>  Tue, 06 Mar 2012 23:03:20 +1100
