libgit2-sys - cargo Package Compare versions

Comparing version 0.16.1+1.7.1 to 0.16.2+1.7.2

.cargo_vcs_info.json

 {
   "git": {
-    "sha1": "ff9dca2431864c6aa0712bae329c3e88c440bd4e"
+    "sha1": "987c4e60d3e0e69d58e830527e4c727c776c2c9e"
   },
   "path_in_vcs": "libgit2-sys"
 }

build.rs

@@ -10,3 +10,3 @@ use std::env;
     let mut cfg = pkg_config::Config::new();
-    match cfg.range_version("1.7.1".."1.8.0").probe("libgit2") {
+    match cfg.range_version("1.7.2".."1.8.0").probe("libgit2") {
         Ok(lib) => {
@@ -13,0 +13,0 @@ for include in &lib.include_paths {

Cargo.toml

@@ -15,3 +15,3 @@ # THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
 name = "libgit2-sys"
-version = "0.16.1+1.7.1"
+version = "0.16.2+1.7.2"
 authors = [
@@ -18,0 +18,0 @@ "Josh Triplett <[e-mail]>",

CHANGELOG.md

 # Changelog
 
+## 0.16.2+1.7.2 - 2024-02-06
+[0.16.1...0.16.2](https://github.com/rust-lang/git2-rs/compare/libgit2-sys-0.16.1+1.7.1...libgit2-sys-0.16.2+1.7.2)
+
+### Added
+
+- Added binding for `git_commit_lookup_prefix`.
+  [#1011](https://github.com/rust-lang/git2-rs/pull/1011)
+- Added binding for `git_object_lookup_prefix`.
+  [#1014](https://github.com/rust-lang/git2-rs/pull/1014)
+
+### Changed
+
+- ❗ Updated to libgit2 [1.7.2](https://github.com/libgit2/libgit2/releases/tag/v1.7.2).
+  This fixes [CVE-2024-24575](https://github.com/libgit2/libgit2/security/advisories/GHSA-54mf-x2rh-hq9v) and [CVE-2024-24577](https://github.com/libgit2/libgit2/security/advisories/GHSA-j2v7-4f6v-gpg8).
+  [#1017](https://github.com/rust-lang/git2-rs/pull/1017)
+
 ## 0.16.1+1.7.1 - 2023-08-28
@@ -4,0 +20,0 @@ [0.16.0...0.16.1](https://github.com/rust-lang/git2-rs/compare/libgit2-sys-0.16.0+1.7.1...libgit2-sys-0.16.1+1.7.1)

libgit2/CMakeLists.txt

@@ -9,3 +9,3 @@ # libgit2: the cross-platform, linkable library implementation of git.
 
-project(libgit2 VERSION "1.7.1" LANGUAGES C)
+project(libgit2 VERSION "1.7.2" LANGUAGES C)
 
@@ -12,0 +12,0 @@ # Add find modules to the path

libgit2/include/git2/version.h

@@ -14,3 +14,3 @@ /*
  */
-#define LIBGIT2_VERSION        "1.7.1"
+#define LIBGIT2_VERSION        "1.7.2"
 
@@ -24,3 +24,3 @@ /** The major version number for this version of libgit2. */
 /** The revision ("teeny") version number for this version of libgit2. */
-#define LIBGIT2_VER_REVISION   1
+#define LIBGIT2_VER_REVISION   2
 
@@ -27,0 +27,0 @@ /** The Windows DLL patch number for this version of libgit2. */

libgit2/package.json

 {
   "name": "libgit2",
-  "version": "1.7.1",
+  "version": "1.7.2",
   "repo": "https://github.com/libgit2/libgit2",
@@ -5,0 +5,0 @@ "description": " A cross-platform, linkable library implementation of Git that you can use in your application.",

libgit2/src/libgit2/revparse.c

@@ -704,2 +704,3 @@ /*
 	bool should_return_reference = true;
+	bool parsed = false;
 
@@ -714,3 +715,3 @@ GIT_ASSERT_ARG(object_out);
 
-	while (spec[pos]) {
+	while (!parsed && spec[pos]) {
 		switch (spec[pos]) {
@@ -822,2 +823,4 @@ case '^':
 				spec = "HEAD";
+				identifier_len = 4;
+				parsed = true;
 				break;
@@ -824,0 +827,0 @@ }

libgit2/src/libgit2/transports/smart_pkt.c

@@ -235,3 +235,4 @@ /*
 
-	if ((caps = memchr(line, '\0', len)) != NULL) {
+	if ((caps = memchr(line, '\0', len)) != NULL &&
+	    len > (size_t)((caps - line) + 1)) {
 		caps++;
@@ -238,0 +239,0 @@

No alert changes

No metric changes