Merge pull request #4076 from libgit2/cmn/sec-update-25

security updates for v0.25