Re: [Buildroot] [PATCH 1/1] package/libgit2: security bump version to 1.9.6
Titouan Christophe via buildroot <[email protected]>
| Newsgroups | net.busybox.buildroot |
|---|---|
| Message-ID | <[email protected]> |
On 10/08/26 10:43, Nicolas Cavallari wrote: > v1.9.5 fixes CVE-2026-53586, CVE-2026-53587, CVE-2026-53585, > CVE-2026-53584, CVE-2026-53583. v1.9.6 fixes other non-security issues. > > Release notes: > https://github.com/libgit2/libgit2/releases/tag/v1.9.5 > https://github.com/libgit2/libgit2/releases/tag/v1.9.6 > > v1.9.5 also replaces a bundled vulnerable libpcre with libpcre2 and > updated the PCRE license in COPYING as a result. This is mostly useful > on Windows; On POSIX systems, libgit2 can use regcomp() and Buildroot > already asks for it. > > Signed-off-by: Nicolas Cavallari <[email protected]> Applied to 2025.02.x and 2026.05.x, thanks ! _______________________________________________ buildroot mailing list [email protected] https://lists.buildroot.org/mailman/listinfo/buildroot