diff mbox series

[3/3] libgit2: upgrade 1.9.6 -> 1.9.7

Message ID 20260814140819.2840177-3-richard.purdie@linuxfoundation.org
State Under Review
Headers show
Series [1/3] bash-completion: upgrade 2.17.0 -> 2.18.0 | expand

Commit Message

Richard Purdie Aug. 14, 2026, 2:08 p.m. UTC 
v1.9.7
------

This is an security release with one change.

* Escape remote repository paths in libssh2

  In v1.9.2, we started escaping repository paths in the OpenSSH-based
  exec ssh transport. Bring the same escaping to the libssh2 transport
  to avoid any potential command injection.

In addition, changes have been ported from the main branch to update
CI builds.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---
 ...cmake-mark-system-libraries-are-private-link-librari.patch | 4 +---
 .../libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb}            | 2 +-
 2 files changed, 2 insertions(+), 4 deletions(-)
 rename meta/recipes-support/libgit2/{libgit2_1.9.6.bb => libgit2_1.9.7.bb} (93%)
diff mbox series

Patch

diff --git a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
index 267770ae6fe..93f1f3a870c 100644
--- a/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
+++ b/meta/recipes-support/libgit2/files/0001-cmake-mark-system-libraries-are-private-link-librari.patch
@@ -1,4 +1,4 @@ 
-From 5670d3eed82f0d64766158809bf3d0c7c631b0ea Mon Sep 17 00:00:00 2001
+From 41048806aec8a4b71f3ccf11fdedbec88080a675 Mon Sep 17 00:00:00 2001
 From: Ross Burton <ross.burton@arm.com>
 Date: Thu, 23 Jul 2026 17:35:23 +0100
 Subject: [PATCH] cmake: mark system libraries are private link libraries
@@ -38,5 +38,3 @@  index 8045ddef9..fafdb09ec 100644
  target_include_directories(libgit2package SYSTEM PRIVATE ${LIBGIT2_INCLUDES})
  target_include_directories(libgit2package INTERFACE $<INSTALL_INTERFACE:${CMAKE_INSTALL_INCLUDEDIR}>)
  
--- 
-2.43.0
diff --git a/meta/recipes-support/libgit2/libgit2_1.9.6.bb b/meta/recipes-support/libgit2/libgit2_1.9.7.bb
similarity index 93%
rename from meta/recipes-support/libgit2/libgit2_1.9.6.bb
rename to meta/recipes-support/libgit2/libgit2_1.9.7.bb
index b17b22c63e1..2de3503aac4 100644
--- a/meta/recipes-support/libgit2/libgit2_1.9.6.bb
+++ b/meta/recipes-support/libgit2/libgit2_1.9.7.bb
@@ -8,7 +8,7 @@  DEPENDS = "curl openssl zlib libssh2 libgcrypt libpcre2"
 SRC_URI = "git://github.com/libgit2/libgit2.git;branch=maint/v1.9;protocol=https;tag=v${PV} \
            file://0001-cmake-mark-system-libraries-are-private-link-librari.patch"
 
-SRCREV = "26055f5af74ab1cf636d272e8a34315496d3f06f"
+SRCREV = "49e408b3208bc3093757a1c2db938d3590f3f412"
 
 inherit cmake