This bug was fixed in the package libgit2 - 1.9.7+ds-1ubuntu1
---------------
libgit2 (1.9.7+ds-1ubuntu1) tenacious; urgency=medium
* Merge with Debian unstable. (LP: #2171224) Remaining changes:
- Vendor llhttp within package (LP #2080872)
- d/t/control: use cmake:native
* Dropped changes:
- Fix CVE-2026-5917: shell command injection vulnerability
(Closes: 1144465)
- Fixed upstream
libgit2 (1.9.7+ds-1) unstable; urgency=medium
* New upstream version 1.9.7+ds
- Fix CVE-2026-5917: shell command injection vulnerability
(Closes: #1144465)
-- Willow Carlson-Huber <[email protected]> Mon, 26
Oct 2026 16:48:45 -0500
** Changed in: libgit2 (Ubuntu)
Status: In Progress => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2026-5917
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2171224
Title:
Merge libgit2 1.9.7+ds-1 from Debian for tenacious cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libgit2/+bug/2171224/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
