Merge pull request #6271 from libgit2/ethomson/v1.3.1 · salewski/libgit2@1f5e7f9 · GitHub
Skip to content

Commit 1f5e7f9

Browse files
authored
Merge pull request libgit2#6271 from libgit2/ethomson/v1.3.1
v1.3.1 release
2 parents a9eac6a + 23c24f8 commit 1f5e7f9

4 files changed

Lines changed: 19 additions & 4 deletions

File tree

‎CMakeLists.txt‎

Lines changed: 1 addition & 1 deletion

‎docs/changelog.md‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,18 @@
1+
v1.3.1
2+
------
3+
4+
🔒 This is a security release to provide compatibility with git's changes to address [CVE 2022-24765](https://github.blog/2022-04-12-git-security-vulnerability-announced/).
5+
6+
**libgit2 is not directly affected** by this vulnerability, because libgit2 does not directly invoke any executable. But we are providing these changes as a security release for any users that use libgit2 for repository discovery and then _also_ use git on that repository. In this release, we will now validate that the user opening the repository is the same user that owns the on-disk repository. This is to match git's behavior.
7+
8+
In addition, we are providing several correctness fixes where invalid input can lead to a crash. These may prevent possible denial of service attacks. At this time there are not known exploits to these issues.
9+
10+
Full list of changes:
11+
12+
* Validate repository directory ownership (v1.3) by @ethomson in https://github.com/libgit2/libgit2/pull/6268
13+
14+
All users of the v1.3 release line are recommended to upgrade.
15+
116
v1.3
217
----
318

‎include/git2/version.h‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,10 +7,10 @@
77
#ifndef INCLUDE_git_version_h__
88
#define INCLUDE_git_version_h__
99

10-
#define LIBGIT2_VERSION "1.3.0"
10+
#define LIBGIT2_VERSION "1.3.1"
1111
#define LIBGIT2_VER_MAJOR 1
1212
#define LIBGIT2_VER_MINOR 3
13-
#define LIBGIT2_VER_REVISION 0
13+
#define LIBGIT2_VER_REVISION 1
1414
#define LIBGIT2_VER_PATCH 0
1515

1616
#define LIBGIT2_SOVERSION "1.3"

‎package.json‎

Lines changed: 1 addition & 1 deletion

0 commit comments

Comments
 (0)