| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: libgit2-tools | Distribution: openSUSE Tumbleweed |
| Version: 1.8.1 | Vendor: openSUSE |
| Release: 1.1 | Build date: Fri May 17 12:30:50 2024 |
| Group: Development/Tools/Version Control | Build host: reproducible |
| Size: 1255444 | Source RPM: libgit2-1.8.1-1.1.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://libgit2.github.com/ | |
| Summary: A Git command-line interface based on libgit2 | |
This package contains a git cli based on libgit2.
GPL-2.0-only WITH GCC-exception-2.0
* Fri May 17 2024 Dirk Müller <dmueller@suse.com>
- update to 1.8.1:
* In v1.8, libgit2 introduced the `report_unchanged ` member in
the `git_fetch_options` structure. We mistakenly introduced
this as a bitfield, which is not suitable for our public API.
To correct this mistake, we have _removed_ the
`report_unchanged ` member. To support the report unchanged
tips option, users can set the `update_fetchhead`
member to include the `GIT_REMOTE_UPDATE_REPORT_UNCHANGED`
value.
* The libgit2 projects regrets the API change, but this was
required to support cross-platform compatibility.
* commit: Fix git_commit_create_from_stage without author and
* committer
* process.c: fix environ
* Bounds check for pack index read
* transport: provide a useful error message during cancellation
* transport: support sha256 oids
* Revparse: Correctly accept ref with '@' at the end
* remote: drop bitfields in git_remote_fetch_options
* examples: fix memory leak in for-each-ref.c
* xdiff: use proper free function
* rand: avoid uninitialized loadavg warnings
* cli: include alloca on illumos / solaris / sunos
* Update git_array allocator to obey strict aliasing rules
* tree: avoid mixed signedness comparison by @ethomson in
* Sun Mar 24 2024 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.8.0:
* Simplified commit creation (git_commit_create_from_stage)
* Worktree improvements for better compatibility with core git
* ABI breaking channge: Add WORKTREE configuration level.
GIT_CONFIG_LEVEL_WORKTREE level t priority 6,
GIT_CONFIG_LEVEL_APP now begins at priority 7.
* ABI breaking change: git_config_entry structure change
* ABI breaking change: git_push_options includes remote push
options
- the optional, experimental support for invoking OpenSSH remains
disabled in this package
* Wed Feb 07 2024 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.7.2:
* CVE-2024-24575: infinite loop condition given specially crafted
inputs (boo#1219664)
* CVE-2024-24577: arbitrary code execution due to heap corruption
in git_index_add (boo#1219660)
* Fix a bug in the smart transport negotiation could have caused
an out-of-bounds read when a remote server did not advertise
capabilities.
* Tue Aug 15 2023 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.7.1:
* proxy: Return an error for invalid proxy URLs instead of crashing
* ssh: fix known_hosts leak in _git_ssh_setup_conn
* repository: make cleanup safe for re-use with grafts
* fix: Add missing include for oidarray
* Revert "CMake: Search for ssh2 instead of libssh2."
* Wed Jul 19 2023 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.7.0:
* supports shallow clone and shallow repositories
* Simplify custom pluggable allocator (breaking change)
* repo: honor environment variables for more scenarios
* Introduce timeouts on sockets
* some performance improvements and bug fixes
* Wed Apr 12 2023 Andreas Stieger <andreas.stieger@gmx.de>
- Update to 1.6.4:
* config: return GIT_ENOTFOUND for missing programdata
- move experimental cli into libgit2-tools as intended
* Tue Mar 21 2023 Paolo Stivanin <info@paolostivanin.com>
- Update to 1.6.3:
* odb: restore git_odb_open by @ethomson in #6520
* Ensure that git_index_add_all handles ignored directories by @ethomson in #6521
* pack: use 64 bits for the number of objects by @carlosmn in #6530
- Drop restore-git-odb-open.patch
* Tue Mar 21 2023 Daniel Garcia <daniel.garcia@suse.com>
- Add restore-git-odb-open.patch, some code was removed by error
upstream and they fix it after the release.
gh#libgit2/libgit2@e1e0d77c6f15
* Tue Mar 07 2023 Andreas Stieger <andreas.stieger@gmx.de>
- libgit2 1.6.2:
* Support the notion of a home directory separately from global
configuration directory
* stash: partial stash specific files
* push: revpars refspec source, so user can push things that are
not refs
* Support OpenSSL 3
* Many bug fixes
- Not enabled: experimental SHA256 support for bare repositories
* Sun Feb 26 2023 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.5.2:
* Improve SSH key handling functionality: examine all keys in
known_hosts files for matches, to support remote hosts with
multiple key types
* Sat Jan 21 2023 Dirk Müller <dmueller@suse.com>
- update to 1.5.1:
* This is a security release to address CVE-2023-22742: when compiled
using the optional, included libssh2 backend, libgit2 fails to verify
SSH keys by default. boo#1207364
* When using an SSH remote with the optional, included libssh2 backend,
libgit2 does not perform certificate checking by default. Prior versions
of libgit2 require the caller to set the `certificate_check` field of
libgit2's `git_remote_callbacks` structure - if a certificate check
callback is not set, libgit2 does not perform any certificate checking.
This means that by default - without configuring a certificate check
callback, clients will not perform validation on the server SSH keys and
may be subject to a man-in-the-middle attack.
* Wed Dec 21 2022 Dominique Leuenberger <dimstar@opensuse.org>
- Drop baselibs.conf: there is no known consumer of the -32bit
package.
* Thu Jul 14 2022 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.5.0:
* add the basis for an experimental CLI
* continue prepare for SHA256 support
* add a benchmarking utility
* Tue Jul 12 2022 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.4.4 (bsc#1198234)
* Compatibility with git's changes to address CVE-2022-29187. As
a follow up to CVE 2022-24765, now not only is the working
directory of a non-bare repository examined for its ownership,
but the .git directory and the .git file (if present) are also
examined for their ownership [boo#1201431]
* A fix for compatibility with git's (new) behavior for
CVE 2022-24765 allows users on POSIX systems to access a git
repository that is owned by them when they are running in sudo
- enable reproducible builds
* Wed Apr 13 2022 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.4.3:
* compatibility with git's changes for CVE-2022-24765 boo#1187234
* several correctness fixes where invalid input can lead to a
crash and denial of service
* Thu Mar 17 2022 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.4.2:
* remote: do store the update_tips callback error value
* Sat Feb 19 2022 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.4.1:
* improve compatibility with git
* some deprecated API, ABI has changed
* multiple bug fixes and developer visible changes
- build with system PCRE2
- remove http-parser build dependency, bundled lib has fixes
* Wed Oct 20 2021 Matej Cepl <mcepl@suse.com>
- Update to 1.3.0:
- This release includes only minor new features that will be helpful
for users to have an orderly transition to the v2.0 lineage.
- Complete list is available on
https://github.com/libgit2/libgit2/blob/main/docs/changelog.md#v13
* Thu Sep 02 2021 Andreas Stieger <andreas.stieger@gmx.de>
- update to 1.2.0:
* Add support for commit graphs
* Add support for multi-pack indexes
* And core.longpaths support
* Add support for additional SSH hostkey types
* Add NO_PROXY environment variable support
* Developer visible changes and bug fixes
* Fri Jul 16 2021 Dirk Müller <dmueller@suse.com>
- update to 1.1.1:
* Fixes a bug where decompressing packfiles could fail in rare
instances.
* Ensure worktree paths are validated in more cases.
* Builds without thread-safety (`THREADSAFE=OFF`) are supported again.
* Builds without mmap (`NO_MMAP`) are supported again.
* mbedTLS is supported in non-default locations.
* Malformed branch names or missing branches on remotes are ignored.
* Use compiler intrinsics to detect arithmetic overflows in more cases.
* The configuration cache functions properly on systems with strict
alignment.
* A missing options initializer function (`git_blob_filter_options_init`)
was added for `git_blob_filter_options`.
* Several documentation fixes.
/usr/bin/git2 /usr/share/licenses/libgit2-tools /usr/share/licenses/libgit2-tools/COPYING
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Oct 18 00:12:25 2024