UbuntuUpdates.org

Package "libgit2-dev"

Name: libgit2-dev

Description:

low-level Git library (development files)
Latest version: 1.9.1+ds-1ubuntu1.3
Release: resolute (26.04)
Level: security
Repository: main
Head package: libgit2
Homepage: https://libgit2.github.com/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libgit2-dev"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libgit2-dev" in Resolute

Repository Area Version
base main 1.9.1+ds-1ubuntu1
updates main 1.9.1+ds-1ubuntu1.3

Changelog

Version: 1.9.1+ds-1ubuntu1.3 2026-10-08 16:07:49 UTC

libgit2 (1.9.1+ds-1ubuntu1.3) resolute-security; urgency=medium

  * SECURITY UPDATE: incorrect SubjectAltName handling
    - debian/patches/CVE-2026-53583.patch: Fix inverted IP SubjectAltName
      comparison in OpenSSL backend in src/libgit2/streams/openssl.c.
    - CVE-2026-53583

 -- Marc Deslauriers Tue, 06 Oct 2026 10:32:45 -0400
Source diff to previous version
CVE-2026-53583 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality i

Version: 1.9.1+ds-1ubuntu1.2 2026-09-23 19:07:29 UTC

libgit2 (1.9.1+ds-1ubuntu1.2) resolute-security; urgency=medium

  * SECURITY UPDATE: Remote code execution via SSH backend
    - debian/patches/CVE-2026-5917-pre1.patch: Allow escaping with suffix and
      prefix in src/util/str.c and ../str.h
    - debian/patches/CVE-2026-5917.patch: Escape repo path in
      src/libgit2/transports/ssh_libssh2.c
    - CVE-2026-5917

 -- Kyle Kernick Mon, 21 Sep 2026 14:00:31 -0600
Source diff to previous version
CVE-2026-5917 libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerabi

Version: 1.9.1+ds-1ubuntu1.1 2026-08-12 18:08:14 UTC
No changelog available yet.


About   -   Send Feedback to @ubuntu_updates