[pkgsrc/trunk]: pkgsrc/devel/libgit2 libgit2: Update to 0.28.3

[nia <nia%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/aa57527837c1
branches:  trunk
changeset: 341722:aa57527837c1
user:      nia <nia%pkgsrc.org@localhost>
date:      Sun Oct 06 12:18:30 2019 +0000

description:
libgit2: Update to 0.28.3

This is a security release fixing the following issues:

    A carefully constructed commit object with a very large number
    of parents may lead to potential out-of-bounds writes or
    potential denial of service.

    The ProgramData configuration file is always read for compatibility
    with Git for Windows and Portable Git installations. The ProgramData
    location is not necessarily writable only by administrators, so we
    now ensure that the configuration file is owned by the administrator
    or the current user.

diffstat:

 devel/libgit2/Makefile |   5 ++---
 devel/libgit2/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (28 lines):

diff -r 7789376fed6f -r aa57527837c1 devel/libgit2/Makefile
--- a/devel/libgit2/Makefile    Sun Oct 06 12:12:24 2019 +0000
+++ b/devel/libgit2/Makefile    Sun Oct 06 12:18:30 2019 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.39 2019/08/22 12:23:02 ryoon Exp $
+# $NetBSD: Makefile,v 1.40 2019/10/06 12:18:30 nia Exp $
 
-DISTNAME=      libgit2-0.28.2
-PKGREVISION=   3
+DISTNAME=      libgit2-0.28.3
 CATEGORIES=    devel
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=libgit2/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}
diff -r 7789376fed6f -r aa57527837c1 devel/libgit2/distinfo
--- a/devel/libgit2/distinfo    Sun Oct 06 12:12:24 2019 +0000
+++ b/devel/libgit2/distinfo    Sun Oct 06 12:18:30 2019 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.17 2019/05/27 14:35:25 wiz Exp $
+$NetBSD: distinfo,v 1.18 2019/10/06 12:18:30 nia Exp $
 
-SHA1 (libgit2-0.28.2.tar.gz) = 85025d651696a83c4d2a45932235ed1146c95cbc
-RMD160 (libgit2-0.28.2.tar.gz) = 18fbe97266d064b8857618066e156a4297fbcff4
-SHA512 (libgit2-0.28.2.tar.gz) = 0879c162e2e1dc00eadfbda22cd1f9d3a95b4ec2b653c108983f37c2f695140882de4d50d7cbc04ced247125a4e9fe6df16130e1267891aecdb2411d920db5c6
-Size (libgit2-0.28.2.tar.gz) = 4987586 bytes
+SHA1 (libgit2-0.28.3.tar.gz) = fb3c394b36e17ebb2cea42a2c407e899f90509a9
+RMD160 (libgit2-0.28.3.tar.gz) = 76e988d9229a58ff9f1e39e33a33317cb806f33e
+SHA512 (libgit2-0.28.3.tar.gz) = 15444823b7d4885f7b8c3982f8905efc4a75913de016a9b2e0a24d5ce9746e6a549dffd5469036529557feff2ce7ece9328266eb312c80b96091ce0f65ee97ee
+Size (libgit2-0.28.3.tar.gz) = 4988580 bytes