mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-09 16:01:54 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libgit2: security bump version to 1.9.6

Browse Source 
v1.9.5 fixes CVE-2026-53586, CVE-2026-53587, CVE-2026-53585,
CVE-2026-53584, CVE-2026-53583.  v1.9.6 fixes other non-security issues.

Release notes:
https://github.com/libgit2/libgit2/releases/tag/v1.9.5
https://github.com/libgit2/libgit2/releases/tag/v1.9.6

v1.9.5 also replaces a bundled vulnerable libpcre with libpcre2 and
updated the PCRE license in COPYING as a result.  This is mostly useful
on Windows; On POSIX systems, libgit2 can use regcomp() and Buildroot
already asks for it. See:
3a9102dae9

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
[Julien: add link to license update upstream commit]
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Nicolas Cavallari
2026-08-10 10:43:11 +02:00
committed by Julien Olivain
parent d705d20506
commit 3c2d207f8c
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
package/libgit2/libgit2.hash
View File

@@ -1,3 +1,3 @@
# Locally calculated
sha256 824b73bd13647800fe4b566a1008ae77fea0e3e3424edab632fcfd8c0b14ba8b libgit2-1.9.4.tar.gz
sha256 e3712465634e97cfd850822a4eb5ac7d2f8a10f753189366d5a2060046f28288 COPYING
sha256 a88a42a4ea9bdab7aa8686eead3bf7d9c6dd74529caca16ab22eaa92433d31d9 libgit2-1.9.6.tar.gz
sha256 e0938121c0554985fe17196ac38fc590d149268e9c46e0c0e7a2eae1354fae71 COPYING

2
package/libgit2/libgit2.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBGIT2_VERSION = 1.9.4
LIBGIT2_VERSION = 1.9.6
LIBGIT2_SITE = $(call github,libgit2,libgit2,v$(LIBGIT2_VERSION))
LIBGIT2_LICENSE = \
GPL-2.0 with linking exception, \