Accepting request 1324382 from devel:libraries:c_c++

libgit2 1.9.2 boo#1255640 boo#1255641

OBS-URL: https://build.opensuse.org/request/show/1324382
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libgit2?expand=0&rev=71

libgit2-1.9.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:14cab3014b2b7ad75970ff4548e83615f74d719afe00aa479b4a889c1e13fc00
-size 7665631

libgit2-1.9.2.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6f097c82fc06ece4f40539fb17e9d41baf1a5a2fc26b1b8562d21b89bc355fe6
+size 7667818

libgit2.changes

@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Wed Dec 24 22:06:13 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 1.9.2:
+  * A bug in the external SSH execution is fixed that could cause
+    arbitrary command execution. Remote repository names were
+    improperly sent to the shell without quoting. Arguments to the
+    external SSH command are now sent parameterized. (boo#1255640)
+  * A bug in SSH credential creation is fixed that could cause a
+    buffer overflow. Public keys that are not NUL terminated were
+    improperly zeroed. The given length of public keys is now
+    honored. (boo#1255641)
+
 -------------------------------------------------------------------
 Mon Jun 16 19:23:27 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
 

libgit2.spec

@@ -29,7 +29,7 @@
 %bcond_with expt_sha256
 %endif
 Name:           %{pname}%{?psuffix}
-Version:        1.9.1
+Version:        1.9.2
 Release:        0
 Summary:        C git library
 License:        GPL-2.0-only WITH GCC-exception-2.0