v1.9.7 ------ This is an security release with one change.
* Escape remote repository paths in libssh2 In v1.9.2, we started escaping repository paths in the OpenSSH-based exec ssh transport. Bring the same escaping to the libssh2 transport to avoid any potential command injection. In addition, changes have been ported from the main branch to update CI builds. Signed-off-by: Richard Purdie <[email protected]> --- ...cmake-mark-system-libraries-are-private-link-librari.patch | 4 +--- .../libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb} | 2 +- 2 files changed, 2 insertions(+), 4 deletions(-) rename meta/recipes-support/libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb} (93%) diff --git a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch index 267770ae6fe..93f1f3a870c 100644 --- a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch +++ b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch @@ -1,4 +1,4 @@ -From 5670d3eed82f0d64766158809bf3d0c7c631b0ea Mon Sep 17 00:00:00 2001 +From 41048806aec8a4b71f3ccf11fdedbec88080a675 Mon Sep 17 00:00:00 2001 From: Ross Burton <[email protected]> Date: Thu, 23 Jul 2026 17:35:23 +0100 Subject: [PATCH] cmake: mark system libraries are private link libraries @@ -38,5 +38,3 @@ index 8045ddef9..fafdb09ec 100644 target_include_directories(libgit2package SYSTEM PRIVATE ${LIBGIT2_INCLUDES}) target_include_directories(libgit2package INTERFACE $<INSTALL_INTERFACE:${CMAKE_INSTALL_INCLUDEDIR}>) --- -2.43.0 diff --git a/meta/recipes-support/libgit2/libgit2_1.9.6.bb b/meta/recipes-support/libgit2/libgit2_1.9.7.bb similarity index 93% rename from meta/recipes-support/libgit2/libgit2_1.9.6.bb rename to meta/recipes-support/libgit2/libgit2_1.9.7.bb index b17b22c63e1..2de3503aac4 100644 --- a/meta/recipes-support/libgit2/libgit2_1.9.6.bb +++ b/meta/recipes-support/libgit2/libgit2_1.9.7.bb @@ -8,7 +8,7 @@ DEPENDS = "curl openssl zlib libssh2 libgcrypt libpcre2" SRC_URI = "git://github.com/libgit2/libgit2.git;branch=maint/v1.9;protocol=https;tag=v${PV} \ file://0001-cmake-mark-system-libraries-are-private-link-librari.patch" -SRCREV = "26055f5af74ab1cf636d272e8a34315496d3f06f" +SRCREV = "49e408b3208bc3093757a1c2db938d3590f3f412" inherit cmake
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#243453): https://lists.openembedded.org/g/openembedded-core/message/243453 Mute This Topic: https://lists.openembedded.org/mt/120749327/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
