Repository navigation
Security issues #7480
Description
In vanilla Git several security fixes and hardenings have been integrated. Often it is unclear whether these also affect libgit2, hence, a documentation would be really helpful.
| CVS | Status in libgit2 |
|---|---|
| CVE-2026-111760 | unclear |
| CVE-2026-113408 | unclear |
| CVE-2026-114467 | unclear, unlikely merge uses different code |
| CVE-2026-114469 | unclear |
| CVE-2026-105437 | unclear |
| CVE-2026-114466 | unclear |
| CVE-2026-62960 | unclear |
Hardenings:
| Commit | Status in libgit2 |
|---|---|
| ff7e18348ba179a4b88bf0b7fc65f4e2733b9bfe | missing |
| 1c93cc03eaed7d3e830864c502aae49551421fd2 | #7482 |
Other dependencies:
- There is a new zlib release which fixes security issues (cf. Update shipped zlib to 1.4 #7463, Update zlib to version 1.4 #7481)
- There are new pcre2 releases which fix security issues (cf. https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48 and https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.49)
Activity