Files
buildroot/package/libgit2/libgit2.hash
Nicolas Cavallari 31bdf1643d package/libgit2: security bump version to 1.9.6
v1.9.5 fixes CVE-2026-53586, CVE-2026-53587, CVE-2026-53585,
CVE-2026-53584, CVE-2026-53583.  v1.9.6 fixes other non-security issues.

Release notes:
https://github.com/libgit2/libgit2/releases/tag/v1.9.5
https://github.com/libgit2/libgit2/releases/tag/v1.9.6

v1.9.5 also replaces a bundled vulnerable libpcre with libpcre2 and
updated the PCRE license in COPYING as a result.  This is mostly useful
on Windows; On POSIX systems, libgit2 can use regcomp() and Buildroot
already asks for it. See:
3a9102dae9

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
[Julien: add link to license update upstream commit]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 3c2d207f8c)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
2026-08-20 10:56:08 +02:00

4 lines
198 B
Plaintext

# Locally calculated
sha256 a88a42a4ea9bdab7aa8686eead3bf7d9c6dd74529caca16ab22eaa92433d31d9 libgit2-1.9.6.tar.gz
sha256 e0938121c0554985fe17196ac38fc590d149268e9c46e0c0e7a2eae1354fae71 COPYING