UbuntuUpdates.org

Package "libgit2"

Name: libgit2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • low-level Git library - test suite examples
Latest version: 1.7.2+ds-1ubuntu3.2
Release: noble (24.04)
Level: updates
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "libgit2" in Noble

Repository Area Version
base universe 1.7.2+ds-1ubuntu3
base main 1.7.2+ds-1ubuntu3
security main 1.7.2+ds-1ubuntu3.2
security universe 1.7.2+ds-1ubuntu3.2
updates main 1.7.2+ds-1ubuntu3.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.7.2+ds-1ubuntu3.2 2026-09-23 22:07:33 UTC

libgit2 (1.7.2+ds-1ubuntu3.2) noble-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via SSH backend
    - debian/patches/CVE-2026-5917-pre1.patch: Allow escaping with suffix and
      prefix in src/util/str.c and ../str.h
    - debian/patches/CVE-2026-5917.patch: Escape repo path in
      src/libgit2/transports/ssh.c
    - CVE-2026-5917

 -- Kyle Kernick Mon, 21 Sep 2026 14:01:17 -0600
Source diff to previous version
CVE-2026-5917 libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerabi

Version: 1.7.2+ds-1ubuntu3.1 2026-08-12 19:08:12 UTC
No changelog available yet.


About   -   Send Feedback to @ubuntu_updates