From 49996c01e41bb99a03c156d6beb1991b355cf7b1 Mon Sep 17 00:00:00 2001
From: Daniel Sabogal <dsabogalcc@gmail.com>
Date: Wed, 23 Nov 2016 20:59:47 -0500
Subject: [PATCH] main/libgit2: security upgrade to 0.24.3
CVE-2016-8568
CVE-2016-8569
---
main/libgit2/APKBUILD | 18 +++++++++++-------
1 file changed, 11 insertions(+), 7 deletions(-)
diff --git a/main/libgit2/APKBUILD b/main/libgit2/APKBUILD
index e768971f6ad4..9af3a89c4a78 100644
--- a/main/libgit2/APKBUILD
+++ b/main/libgit2/APKBUILD
@@ -2,8 +2,8 @@
# Contributor: Pierre-Gilas MILLON <pgmillon@gmail.com>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=libgit2
-pkgver=0.24.2
-pkgrel=1
+pkgver=0.24.3
+pkgrel=0
pkgdesc="A linkable library for Git"
url="https://libgit2.github.com/"
arch="all"
@@ -11,11 +11,15 @@ license="GPLv2"
depends=""
depends_dev="curl-dev libssh2-dev"
makedepends="$depends_dev python2 cmake zlib-dev libressl-dev"
-install=""
subpackages="$pkgname-dev $pkgname-libs"
-source="$pkgname-$pkgver.tar.gz::https://github.com/${pkgname}/${pkgname}/archive/v${pkgver}.tar.gz"
+source="$pkgname-$pkgver.tar.gz::https://github.com/$pkgname/$pkgname/archive/v$pkgver.tar.gz"
builddir="$srcdir/$pkgname-$pkgver"
+# secfixes:
+# 0.24.3-r0:
+# - CVE-2016-8568
+# - CVE-2016-8569
+
build() {
cd "$builddir"
cmake \
@@ -34,6 +38,6 @@ package() {
-C "$builddir" install || return 1
}
-md5sums="735661b5b73e3c120d13e2bae21e49b3 libgit2-0.24.2.tar.gz"
-sha256sums="00f0a7403143fba69601accc80cacf49becc568b890ba232f300c1b2a37475e6 libgit2-0.24.2.tar.gz"
-sha512sums="aaba85ef65e00b5916642121dbf0e785c20332f29312e772186eef0eebba5c997a60f94dfb651cbab25c3070c7b4cc37e8619d9cb9fed590e1fb0460bcb7af02 libgit2-0.24.2.tar.gz"
+md5sums="df626711b16bd5e7021123cbf1655399 libgit2-0.24.3.tar.gz"
+sha256sums="0a24e6a51dbf3beecb0ebcd2cafb1e09b1212e910be6477b5de03c84a5586754 libgit2-0.24.3.tar.gz"
+sha512sums="cb7b482664a5527e2d7c8f7c98755fd578f5331bc39fa2a5c8b841508e075b06b936f2c4a55cb4d10fe5d1677b596387bb16d68c220f1f23fce0a894b092f8c4 libgit2-0.24.3.tar.gz"
--
GitLab