This update for libgit2 fixes the following issues:
CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in git_index_add (bsc#1219660)
Affected Packages
libgit2
SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP3-LTSS
Fixed in:
0.28.4-150200.3.9.1
libgit2-28
SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP3-LTSS
Fixed in:
0.28.4-150200.3.9.1
libgit2-devel
SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP3-LTSS