This bug was fixed in the package libgit2 - 1.9.3+ds-1ubuntu1

---------------
libgit2 (1.9.3+ds-1ubuntu1) stonking; urgency=medium

  * Merge with Debian unstable (LP: #2143615). Remaining changes:
    - Vendor llhttp within package (LP #2080872)
    - d/t/control: use cmake:native
  * Dropped changes:
    - d/{control,rules}: use OpenSSL as the crypto backend
      [Fixed in 1.9.2+ds-7]
    - d/copyright: include llhttp in tarball

libgit2 (1.9.3+ds-1) unstable; urgency=medium

  * New upstream version 1.9.3+ds
  * libgit2{,-experimental}-dev must depend on libllhttp-dev now
  * Update d/symbols

libgit2 (1.9.2+ds-9) unstable; urgency=medium

  * Add more compat symlinks for libgit2-experimental as libgit2
  * Explain the rationale behind libgit2-experimental in README.Debian

libgit2 (1.9.2+ds-8) unstable; urgency=medium

  * libgit2{,-experimental}-dev must depend on libssl-dev now

libgit2 (1.9.2+ds-7) unstable; urgency=medium

  [ Bastian Germann ]
  * Build with OpenSSL instead of mbedTLS (Closes: #1134164)

  [ Timo Röhling ]
  * Change the libgit2-experimental symbol version to LIBGIT2_SHA256.
  * Bump Standards-Version to 4.7.4

libgit2 (1.9.2+ds-6) unstable; urgency=medium

  * Use versioned symbols for libgit2-experimental

libgit2 (1.9.2+ds-5) unstable; urgency=medium

  * Fix FTBFS for binary:all builds (Closes: #1126146)

libgit2 (1.9.2+ds-4) unstable; urgency=medium

  * Switch to llhttp as HTTP parser backend (Closes: #1125517)

libgit2 (1.9.2+ds-3) experimental; urgency=medium

  * Enable experimental SHA-256 support (Closes: #1120588)
  * Mark autopkgtest as superficial

libgit2 (1.9.2+ds-2) unstable; urgency=medium

  * Source only upload.

libgit2 (1.9.2+ds-1) unstable; urgency=medium

  * Migrate debian/watch to version 5 format
  * New upstream version 1.9.2+ds
    - Fix repository name quoting to prevent SSH arbitrary command
      execution by rogue Git server
    - Fix potential buffer overflow in SSH credential creation that
      could be triggered if the public key is not NUL-terminated.
  * Bump Standards-Version to 4.7.3

 -- Max Gilmour <[email protected]>  Wed, 27 May 2026 07:25:57
-0700

** Changed in: libgit2 (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2143615

Title:
  Please merge libgit2 1.9.2+ds-6 (main) from Debian unstable (main)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libgit2/+bug/2143615/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to