Changelog for libgit2-24-0.24.1-10.3.1.x86_64.rpm :
Tue Aug 14 14:00:00 2018 mgorseAATTsuse.com - Add libgit2-boo1095219.patch: validate names of submodules; backport of the security fixes in v0.26.4 (boo#1095219 CVE-2018-11235). - Add libgit2-boo1100613-sign-fix.patch: fix sign extension of big left-shift (boo#1100613 CVE-2018-10887). - Add libgit2-boo1100612-bounds-check.patch: fix out-of-bounds read of delta (boo#1100612 CVE-2018-10888). - Add libgit2-delta-overflow-checks.patch: fix overflow when computing limit (boo#1100613 CVE-2018-10887). - Add libgit2-boo1104641.patch: fix potential out-of-bounds read when processing a \"ng\" smart packet (boo#1104641 CVE-2018-15501).
Wed Mar 14 13:00:00 2018 kbabiochAATTsuse.com - Add libgit2-read-entry-return-code.patch: Changed meaning of return code of read_entry() to indicate success and/or error status, which prevents denial of service attacks via different vectors by not being able to differentiate between these status codes. (CVE-2018-8099 bsc#1085256).
Mon Jan 30 13:00:00 2017 sreevesAATTsuse.com - Fix bsc#1019037 and bsc#1019036. Add libgit2-check-cert-validity.patch CVE-2016-10130 Add libgit2-perform-badssl-check.patch CVE-2017-5338 Add libgit2-verify-packet-length.patch CVE-2016-10128 Add libgit2-empty-lines-as-errors.patch CVE-2016-10129 Add libgit2-expected-error.patch and libgit2-dont-test-rc4.patch CVE-2017-5339
Mon Nov 21 13:00:00 2016 sreevesAATTsuse.com - Add libgit2-init-commit-message.patch and libgit2-validate-name-length.patch. Fix bsc#1003810. CVE-2016-8568, CVE-2016-8569
Mon May 9 14:00:00 2016 sreevesAATTsuse.com - Add to the SDK. Fate#319349 - Update license to GPL-2.0 WITH GCC-exception-2.0
Wed Mar 16 13:00:00 2016 dimstarAATTopensuse.org - Update to version 0.24.0: + Custom filters can now be registered with wildcard attributes, for example filter= *. Consumers should examine the attributes parameter of the check function for details. + Symlinks are now followed when locking a file, which can be necessary when multiple worktrees share a base repository. + You can now set your own user-agent to be sent for HTTP requests by using the GIT_OPT_SET_USER_AGENT with git_libgit2_opts(). + You can set custom HTTP header fields to be sent along with requests by passing them in the fetch and push options. + Tree objects are now assumed to be sorted. If a tree is not correctly formed, it will give bad results. This is the git approach and cuts a significant amount of time when reading the trees. + Filter registration is now protected against concurrent registration. + Filenames which are not valid on Windows in an index no longer cause to fail to parse it on that OS. + Rebases can now be performed purely in-memory, without touching the repository\'s workdir. + When adding objects to the index, or when creating new tree or commit objects, the inputs are validated to ensure that the dependent objects exist and are of the correct type. This object validation can be disabled with the GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option. + The WinHTTP transport\'s handling of bad credentials now behaves like the others, asking for credentials again. + Various API changes (additions AND removals). - Rename libgit2-23 subpackage to libgit2-24, following upstraems soname bump (also in baselibs.conf).
Mon Nov 30 13:00:00 2015 astiegerAATTsuse.com - libgit2 0.23.4:
* various bug fixes and improvements - drop upstreamed libgit2-fix-.pc-file.patch
* http: propagate the credentials callback\'s error code
* Fix bug in git_smart__push: push_transfer_progress cb is never called
* remote: don\'t confuse tag auto-follow rules with refspec matching
* curl: use the most secure auth method for the proxy
* Forcing libssh2 lib location
* fix duplicate basenames to support older VS - includes changes from 0.23.1:
* Stage an unregistered submodule in _add_bypath()
* filebuf: remove lockfile upon rename errors
* Increase required version of cmake to 2.8
* Handle ssh:// and git:// urls containing a \'~\' character.
* documentation updates
* submodule URL handling fixes
* index: allow add_bypath to update submodules
* blob: fail to create a blob from a dir with EDIRECTORY
* submodule: lookup the submodule by path if available
* submdule: reproduce double-reporting of a submodule in foreach - note cmake requirement and use cmake makros - build with system libcurl - build with system http-parser
Tue Jul 28 14:00:00 2015 dimstarAATTopensuse.org - Update to version 0.23.0: + Changes or improvements: - Patience and minimal diff drivers can now be used for merges. - Merges can now ignore whitespace changes. - Updated binary identification in CRLF filtering to avoid false positives in UTF-8 files. - Rename and copy detection is enabled for small files. - Checkout can now handle an initial checkout of a repository, making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of clone. - The signature parameter in the ref-modifying functions has been removed. Use git_repository_set_ident() and git_repository_ident() to override the signature to be used. - The local transport now auto-scales the number of threads to use when creating the packfile instead of sticking to one. - Reference renaming now uses the right id for the old value. - The annotated version of branch creation, HEAD detaching and reset allow for specifying the expression from the user to be put into the reflog. - git_rebase_commit now returns GIT_EUNMERGED when you attempt to commit with unstaged changes. - On Mac OS X, we now use SecureTransport to provide the cryptographic support for HTTPS connections insead of OpenSSL. - Checkout can now accept an index for the baseline computations via the baseline_index member. - The configuration for fetching is no longer stored inside the git_remote struct but has been moved to a git_fetch_options. The remote functions now take these options or the callbacks instead of setting them beforehand. - git_submodule instances are no longer cached or shared across lookup. Each submodule represents the configuration at the time of loading. - The index now uses diffs for add_all() and update_all() which gives it a speed boost and closer semantics to git. - The ssh transport now reports the stderr output from the server as the error message, which allows you to get the \"repository not found\" messages. - git_index_conflict_add() will remove staged entries that exist for conflicted paths. - The flags for a git_diff_file will now have the GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side of the diff. This is useful for understanding whether a side of the diff exists in the presence of a conflict. - The constructor for a write-stream into the odb now takes git_off_t instead of size_t for the size of the blob, which allows putting large files into the odb on 32-bit systems. - The remote\'s push and pull URLs now honor the url.$URL.insteadOf configuration. This allows modifying URL prefixes to a custom value via gitconfig. - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer, and git_diff_buffers now accept a new binary callback of type git_diff_binary_cb that includes the binary diff information. - The race condition mitigations described in racy-git.txt have been implemented. - If libcurl is installed, we will use it to connect to HTTP(S) servers. + Various API changes (incl. breaking changes). - Rename libgit2-22 subpackage to libgit2-23, following upstreams soname bump (also in baselibs.conf).
Tue Jan 27 13:00:00 2015 dimstarAATTopensuse.org - Update to version 0.22.1: + The following (critical) fixes have been backported to this maintenance release: - checkout: introduce git_checkout_perfdata. - git_path_join_unrooted: return base len. - checkout: don\'t recreate previous directory. - checkout tests: nasty symlinks. - checkout: drop newline in error message. - checkout: remove files before writing new ones. - checkout tests: emulate p_realpath poorly on Win32. - checkout tests: cleanup realpath impl on Win32. - Changes from version 0.22.0: + git_signature_new() now requires a non-empty email address. + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X. + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of TLSv1 in OpenSSL. + The fetch behavior of remotes with autotag set to GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git 1.9.0 and later. In this mode, libgit2 now fetches all tags in addition to whatever else needs to be fetched. + git_checkout() now handles case-changing renames correctly on case-insensitive filesystems; for example renaming \"readme\" to \"README\". + The search for libssh2 is now done via pkg-config instead of a custom search of a few directories. + Add support for core.protectHFS and core.protectNTFS. Add more validation for filenames which we write such as references. + The local transport now generates textual progress output like git-upload-pack does (\"counting objects\"). + git_checkout_index() can now check out an in-memory index that is not necessarily the repository\'s index, so you may check out an index that was produced by git_merge and friends while retaining the cached information. + Remove the default timeout for receiving / sending data over HTTP using the WinHTTP transport layer. + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix systems. + Provide built-in objects for the empty blob (e69de29) and empty tree (4b825dc) objects. + The index\' tree cache is now filled upon read-tree and write-tree and the cache is written to disk. + LF -> CRLF filter refuses to handle mixed-EOL files. + LF -> CRLF filter now runs when * text = auto (with Git for Windows 1.9.4). + File unlocks are atomic again via rename. Read-only files on Windows are made read-write if necessary. + Share open packfiles across repositories to share descriptors and mmaps. + Use a map for the treebuilder, making insertion O(1). + The build system now accepts an option EMBED_SSH_PATH which when set tells it to include a copy of libssh2 at the given location. This is enabled for MSVC. + Add support for refspecs with the asterisk in the middle of a pattern. + Fetching now performs opportunistic updates. To achieve this, we introduce a difference between active and passive refspecs, which make git_remote_download() and git_remote_fetch() to take a list of resfpecs to be the active list, similarly to how git fetch accepts a list on the command-line. + The THREADSAFE option to build libgit2 with threading support has been flipped to be on by default. + The remote object has learnt to prune remote-tracking branches. If the remote is configured to do so, this will happen via git_remote_fetch(). You can also call git_remote_prune() after connecting or fetching to perform the prune. - Rename libgit2-21 subpackage to libgit2-22, following upstreams soname bump (also in baselibs.conf).
Thu Oct 16 14:00:00 2014 hrvoje.senjanAATTgmail.com - Add baselibs.conf
Thu Jul 10 14:00:00 2014 dimstarAATTopensuse.org - Update to version 0.21.1: + Added a new config snapshotting API to fix race issues when different applications (e.g. Git and a libgit2 client) access the same repository simultaneously. + Added reflog support to all APIs that could alter a reference. + Avoided race conditions when updating references. + Converted all APIs that output string data to use git_buf objects for the return value. + Added standard git_
