libgit2 (1.7.2+ds-1ubuntu3.1) noble-security; urgency=medium

  * SECURITY UPDATE: Path traversal in submodule.
    - debian/patches/CVE-2026-53584.patch: Ensure that we do not try to load
      a submodule who has a filesystem path that points outside of our
      repository in src/libgit2/submodule.c and src/util/fs_path.h.
    - CVE-2026-53584
  * SECURITY UPDATE: Memory exhaustion in delta apply.
    - debian/patches/CVE-2026-53585.patch: Prevent overly large sized
      objects in packfiles in include/git2/common.h, src/libgit2/delta.c,
      src/libgit2/indexer.c, and src/libgit2/settings.c
    - CVE-2026-53585
  * SECURITY UPDATE: Credential leakage in HTTP transport.
    - debian/patches/CVE-2026-53586.patch: Give the URL of the current host
      in src/libgit2/transports/http.c.
    - CVE-2026-53586
  * SECURITY UPDATE: Out-of-bounds read in smart-pkt transport.
    - debian/patches/CVE-2026-53587.patch: Ensure that the current packet
      buffer is large enough in src/libgit2/transports/smart_pkt.c
    - CVE-2026-53587

 -- Kyle Kernick <kyle.kernick@canonical.com>  Tue, 11 Aug 2026 11:46:54 -0600

libgit2 (1.7.2+ds-1ubuntu3) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 01:58:30 +0000

libgit2 (1.7.2+ds-1ubuntu2) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 04 Mar 2024 18:24:03 +0000

libgit2 (1.7.2+ds-1ubuntu1) noble; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Use OpenSSL as the crypto backend
    - Use cmake:native in d/tests/control
    - Lower optimization level to O2 on ppc64el to fix a test failure

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Tue, 13 Feb 2024 09:12:02 +0100

libgit2 (1.7.2+ds-1) unstable; urgency=medium

  * New upstream version 1.7.2+ds
    - Fix CVE-2024-24575: Denial of service in git_revparse_single
      (Closes: #1063415)
    - Fix CVE-2024-24577: Use-after-free in git_index_add
      (Closes: #1063416)
  * Build-depend on pkgconf instead of pkg-config

 -- Timo Röhling <roehling@debian.org>  Thu, 08 Feb 2024 09:10:45 +0100

libgit2 (1.7.1+ds-2ubuntu1) noble; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Use OpenSSL as the crypto backend
    - Use cmake:native in d/tests/control
    - Lower optimization level to O2 on ppc64el to fix a test failure

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Sun, 03 Dec 2023 09:29:52 +0100

libgit2 (1.7.1+ds-2) unstable; urgency=medium

  * Upload to unstable.

 -- Timo Röhling <roehling@debian.org>  Sat, 02 Dec 2023 20:29:31 +0100

libgit2 (1.7.1+ds-1) experimental; urgency=medium

  * Update d/copyright
  * New upstream version 1.7.1+ds
  * Bump SONAME to 1.7

 -- Timo Röhling <roehling@debian.org>  Fri, 08 Sep 2023 10:45:39 +0200

libgit2 (1.6.4+ds-1) experimental; urgency=medium

  * New upstream version 1.6.4+ds
  * Refresh patches
    - Drop fix-unit-tests.patch (no longer needed)
  * Bump SONAME to 1.6
  * Add myself to uploaders
  * Update d/symbols

 -- Timo Röhling <roehling@debian.org>  Mon, 19 Jun 2023 20:45:38 +0200

libgit2 (1.5.1+ds-1ubuntu1) lunar; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Use OpenSSL as the crypto backend
    - Use cmake:native in d/tests/control
    - Lower optimization level to O2 on ppc64el to fix a test failure

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Thu, 26 Jan 2023 22:12:51 +0100

libgit2 (1.5.1+ds-1) unstable; urgency=high

  * Team upload.
  * New upstream version 1.5.1+ds
    - Fix CVE-2023-22742: No certificate checking for SSH remotes
  * Bump Standards-Version to 4.6.2

 -- Timo Röhling <roehling@debian.org>  Sun, 22 Jan 2023 22:03:29 +0100

libgit2 (1.5.0+ds-6ubuntu2) lunar; urgency=medium

  * Merge from Debian unstable. Remaining changes:
    - Use OpenSSL as the crypto backend
    - Use cmake:native in d/tests/control
    - Lower optimization level to O2 on ppc64el to fix a test failure

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Fri, 04 Nov 2022 12:25:02 +0100

libgit2 (1.5.0+ds-6) unstable; urgency=medium

  * Team upload.
  * Upload to unstable.

 -- Timo Röhling <roehling@debian.org>  Sun, 02 Oct 2022 16:07:23 +0200

libgit2 (1.5.0+ds-5) experimental; urgency=medium

  * Team upload.
  * Fix libpcre2-dev dependency of libgit2-dev

 -- Timo Röhling <roehling@debian.org>  Thu, 08 Sep 2022 22:17:22 +0200

libgit2 (1.5.0+ds-4) experimental; urgency=medium

  * Team upload.
  * Disable even more flaky lstat() tests

 -- Timo Röhling <roehling@debian.org>  Wed, 31 Aug 2022 15:54:12 +0200

libgit2 (1.5.0+ds-3) experimental; urgency=medium

  * Team upload.
  * Guard more lstat() asserts with GITTEST_FLAKY_STAT

 -- Timo Röhling <roehling@debian.org>  Wed, 31 Aug 2022 13:36:51 +0200

libgit2 (1.5.0+ds-2) experimental; urgency=medium

  * Team upload.
  * Enable GITTEST_FLAKY_STAT workaround for unit tests
  * Apply M-A hint to libgit2-fixtures

 -- Timo Röhling <roehling@debian.org>  Mon, 29 Aug 2022 23:04:36 +0200

libgit2 (1.5.0+ds-1) experimental; urgency=medium

  * Team upload.
  * Update d/watch
  * Bump Standards-Version to 4.6.1
  * New upstream version 1.5.0+ds (Closes: #1016800)
  * Explicitly set USE_SSH=ON (Closes: #1015965)
  * Bump SONAME to libgit2.so.1.5
  * Add lintian overrides for fixture data
  * Switch to PCRE2 (Closes: #1000045)

 -- Timo Röhling <roehling@debian.org>  Sun, 28 Aug 2022 19:56:46 +0200

libgit2 (1.4.3+dfsg.1-1) experimental; urgency=medium

  * New upstream version 1.4.3+dfsg.1
  * Update symbols file and create libgit2-1.4 binary package
  * d/p/: Refresh patches
  * Add myself to uploaders

 -- Mohammed Bilal <mdbilal@disroot.org>  Thu, 05 May 2022 17:17:21 +0530

libgit2 (1.3.2+dfsg.1-0ubuntu1) kinetic; urgency=medium

  * New upstream bugfix version (LP: #1991636)
  * d/watch: switch to the GH tags page as the release page broke
    tarball links
  * d/p/fix-warnings-atomic-exchange.patch: cherry-picked from upstream
    to silence a particularly loud warning

 -- Simon Chopin <schopin@ubuntu.com>  Tue, 04 Oct 2022 09:55:21 +0200

libgit2 (1.3.0+dfsg.1-3ubuntu1) kinetic; urgency=medium

  * d/control: Use OpenSSL as the crypto backend

 -- Simon Chopin <schopin@ubuntu.com>  Fri, 01 Jul 2022 12:05:54 +0200

libgit2 (1.3.0+dfsg.1-3) unstable; urgency=medium

  * Reupload to unstable

 -- Pirate Praveen <praveen@debian.org>  Mon, 02 May 2022 17:52:28 +0530

libgit2 (1.3.0+dfsg.1-2) experimental; urgency=medium

  * Rebuild with newer libmbedtls

 -- Pirate Praveen <praveen@debian.org>  Wed, 16 Mar 2022 02:19:59 +0530

libgit2 (1.3.0+dfsg.1-1) experimental; urgency=medium

  * New upstream version 1.3.0+dfsg.1
  * Bump Standards-Version to 4.6.0 (no changes needed)
  * Bump debhelper compatibility level to 13
  * Refresh patches
  * Update sumbols file and create libgit2-1.3 binary package

 -- Pirate Praveen <praveen@debian.org>  Sat, 11 Dec 2021 18:10:44 +0530

libgit2 (1.1.0+dfsg.1-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix autopkgtest regression with CMake 3.19+ (Closes: #994494)

 -- Timo Röhling <roehling@debian.org>  Tue, 05 Oct 2021 20:43:28 +0200

libgit2 (1.1.0+dfsg.1-4) unstable; urgency=medium

  * Source-only upload for migration.

 -- Utkarsh Gupta <utkarsh@debian.org>  Wed, 06 Jan 2021 22:58:58 +0530

libgit2 (1.1.0+dfsg.1-3) unstable; urgency=medium

  [ Cédric Boutillier ]
  * Provide binary package for libgit2 fixtures (Closes: #972574)
  * install as examples

  [ Utkarsh Gupta ]
  * Wrap description wrt line length limitation

 -- Utkarsh Gupta <utkarsh@debian.org>  Sun, 27 Dec 2020 10:06:10 +0530

libgit2 (1.1.0+dfsg.1-2) unstable; urgency=medium

  * Upload to unstable.
    - Transition v1.x. (cf: #971571)
  * Bump Standards-Version to 4.5.1

 -- Utkarsh Gupta <utkarsh@debian.org>  Wed, 09 Dec 2020 15:09:10 +0530

libgit2 (1.1.0+dfsg.1-1) experimental; urgency=medium

  * New upstream version 1.1.0+dfsg.1
  * Update branching information in d/gbp.conf
  * Refresh d/patches
  * Drop patch that has been merged upstream
  * Library transition from 1.0 to 1.1
  * Update symbols file
  * Drop Russell Sim from uploaders' field
    - Thank you, Russell Sim, for all your work so far!

 -- Utkarsh Gupta <utkarsh@debian.org>  Mon, 07 Dec 2020 14:21:42 +0530

libgit2 (1.0.1+dfsg.1-3) unstable; urgency=medium

  * Upload to unstable.
    - Transition v1.x. (cf: #971571)

 -- Utkarsh Gupta <utkarsh@debian.org>  Fri, 04 Dec 2020 23:34:22 +0530

libgit2 (1.0.1+dfsg.1-1) experimental; urgency=medium

  [ Utkarsh Gupta ]
  * New upstream version 1.0.1+dfsg.1.
  * Update symbols file to add git_worktree_prune_init_options@Base.

  [ Debian Janitor ]
  * Set upstream metadata fields: Bug-Database, Bug-Submit, Repository,
    Repository-Browse.
  * Drop transition for old debug package migration.
  * Fix day-of-week for changelog entry 0.19.0-2.

 -- Utkarsh Gupta <utkarsh@debian.org>  Fri, 09 Oct 2020 21:05:33 +0530

libgit2 (1.0.0+dfsg.1-2) experimental; urgency=medium

  [ Utkarsh Gupta ]
  * Add Build-Depends-Package: libgit2-dev to libgit2-1.0.symbols

  [ Ximin Luo ]
  * Add missing libgit2-dev: Depends: libpcre3-dev. (Closes: #961952)

 -- Ximin Luo <infinity0@debian.org>  Fri, 02 Oct 2020 03:30:36 +0100

libgit2 (1.0.0+dfsg.1-1) experimental; urgency=medium

  * New upstream version 1.0.0+dfsg.1
  * Library transition to 1.0.0
  * Drop patch as it is merged upstream

 -- Utkarsh Gupta <utkarsh@debian.org>  Fri, 10 Apr 2020 02:21:10 +0530

libgit2 (0.99.0+dfsg.1-1) experimental; urgency=medium

  [ Utkarsh Gupta ]
  * New upstream version 0.99.0+dfsg.1
  * Use pcre2 as REGEX_BACKEND
  * Add patch to fix installation in wrong location
  * Add BD on libpcre2-dev
  * Add -DUSE_NTLMCLIENT and -DUSE_HTTP_PARSER flags to CMake
  * Library transition from 28 to 99
  * Fix package-name-doesnt-match-sonames
  * Fix d/copyright wrt the new release
  * Add Rules-Requires-Root: no

  [ Sudip Mukherjee ]
  * Revert "Use pcre2 as REGEX_BACKEND"
  * Add dependency on ca-certificates and libpcre3-dev
  * Add ci
  * fix symbols file

 -- Utkarsh Gupta <utkarsh@debian.org>  Thu, 26 Mar 2020 18:25:16 +0530

libgit2 (0.28.4+dfsg.1-4) unstable; urgency=medium

  * Add BD on ca-certificates to fix FTBFS (Closes: #954529)
    (Thanks to Sudip Mukherjee for his help :))

 -- Utkarsh Gupta <utkarsh@debian.org>  Mon, 23 Mar 2020 19:52:32 +0530

libgit2 (0.28.4+dfsg.1-3) unstable; urgency=medium

  [ Dan Nicholson ]
  * Use mbedTLS with standard CA certificate location (Closes: #927889)

 -- Utkarsh Gupta <utkarsh@debian.org>  Fri, 13 Mar 2020 02:00:49 +0530

libgit2 (0.28.4+dfsg.1-2) unstable; urgency=medium

  * Re-upload to unstable

 -- Utkarsh Gupta <utkarsh@debian.org>  Fri, 14 Feb 2020 05:17:15 +0530

libgit2 (0.28.4+dfsg.1-1) experimental; urgency=medium

  * New upstream version 0.28.4+dfsg.1
  * Replace libz-dev with zlib1g-dev
  * Replace python-minimal with python3-minimal (Closes: #936866)
  * Make libgit2 cross buildable (Closes: #913241)
  * Add myself as the maintainer
  * Beautify d/control
  * Bump debhelper-compat to 12
  * Bump Standards-Version to 4.5.0

 -- Utkarsh Gupta <utkarsh@debian.org>  Fri, 14 Feb 2020 02:43:40 +0530

libgit2 (0.28.3+dfsg.1-1) unstable; urgency=medium

  * Reupload to unstable (transition: #934927)
  * Add myself and Russel as Uploaders and Jongmin as Maintainer
    (Closes: #928971)
  * Bump Standards-Version to 4.4.1 (no changes needed)

 -- Pirate Praveen <praveen@debian.org>  Sat, 16 Nov 2019 11:21:02 +0530

libgit2 (0.28.3+dfsg.1-0.1) experimental; urgency=medium

  * Non-maintainer upload
  * New upstream version 0.28.3+dfsg.1

 -- Pirate Praveen <praveen@debian.org>  Fri, 15 Nov 2019 22:07:23 +0530

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libgit2-fixtures`.
