CVE-2026-53587
Fixed in a distro release EPSS <1%CVSS 7.5
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.
Products: libgit2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | cargo | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | clippy | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-analyzer | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-debugger-common | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-doc | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-gdb | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-lldb | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-src | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-std-static | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-std-static-aarch64-unknown-none-softfloat | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-std-static-wasm32-unknown-unknown | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-std-static-wasm32-wasip1 | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-std-static-x86_64-unknown-none | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-toolset | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rust-toolset-srpm-macros | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 10 | rustfmt | 1.92.0-2.el10_2.alma.1 |
| AlmaLinux 9 | cargo | 1.92.0-2.el9_8 |
| AlmaLinux 9 | clippy | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-analyzer | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-debugger-common | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-doc | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-gdb | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-lldb | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-src | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-std-static | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-std-static-wasm32-unknown-unknown | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-std-static-wasm32-wasip1 | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rust-toolset | 1.92.0-2.el9_8 |
| AlmaLinux 9 | rustfmt | 1.92.0-2.el9_8 |
| Amazon Linux 2 | cargo | 1.97.0-2.amzn2 |
| Amazon Linux 2 | clippy | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rust | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rust-analyzer | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rust-debugger-common | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rust-doc | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rust-gdb | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rust-src | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rust-std-static | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rust-toolset | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rust-toolset-srpm-macros | 1.97.0-2.amzn2 |
| Amazon Linux 2 | rustfmt | 1.97.0-2.amzn2 |
| Amazon Linux 2023 | cargo | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | cargo-c | 0.10.21-1.amzn2023.0.1 |
| Amazon Linux 2023 | clippy | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | libgit2 | 1.6.4-116.amzn2023 |
| Amazon Linux 2023 | libgit2-devel | 1.6.4-116.amzn2023 |
| Amazon Linux 2023 | network-flow-monitor-agent | 1.1.8-1.amzn2023.0.1 |
| Amazon Linux 2023 | rust | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-analyzer | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-debugger-common | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-doc | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-gdb | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-lldb | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-src | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-std-static | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-std-static-wasm32-unknown-unknown | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-std-static-wasm32-wasip1 | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-toolset | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rust-toolset-srpm-macros | 1.97.0-2.amzn2023 |
| Amazon Linux 2023 | rustfmt | 1.97.0-2.amzn2023 |
| Debian 13 | libgit2 | 1.9.0+ds-2+deb13u1 |
| Debian 14 | libgit2 | 1.9.6+ds-1 |
| Red Hat Enterprise Linux 10.2 | cargo | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | cargo-debuginfo | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | clippy | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | clippy-debuginfo | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-analyzer | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-analyzer-debuginfo | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-debugger-common | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-debuginfo | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-debugsource | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-doc | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-gdb | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-lldb | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-src | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-std-static | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-std-static-aarch64-unknown-none-softfloat | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-std-static-debuginfo | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-std-static-wasm32-unknown-unknown | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-std-static-wasm32-wasip1 | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-std-static-x86_64-unknown-none | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-toolset | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rust-toolset-srpm-macros | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rustfmt | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 10.2 | rustfmt-debuginfo | 0:1.92.0-2.el10_2 |
| Red Hat Enterprise Linux 9 | cargo | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | cargo-debuginfo | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | clippy | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | clippy-debuginfo | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-analyzer | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-analyzer-debuginfo | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-debugger-common | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-debuginfo | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-debugsource | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-doc | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-gdb | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-lldb | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-src | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-std-static | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-std-static-debuginfo | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-std-static-wasm32-unknown-unknown | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-std-static-wasm32-wasip1 | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rust-toolset | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rustfmt | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux 9 | rustfmt-debuginfo | 0:1.92.0-2.el9_8 |
| Red Hat Enterprise Linux eus 10.0 | cargo | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | cargo-debuginfo | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | clippy | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | clippy-debuginfo | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-analyzer | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-analyzer-debuginfo | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-debugger-common | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-debuginfo | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-debugsource | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-doc | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-gdb | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-lldb | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-src | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-std-static | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-std-static-aarch64-unknown-none-softfloat | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-std-static-debuginfo | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-std-static-wasm32-unknown-unknown | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-std-static-wasm32-wasip1 | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-std-static-x86_64-unknown-none | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-toolset | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rust-toolset-srpm-macros | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rustfmt | 0:1.84.1-1.el10_0.4 |
| Red Hat Enterprise Linux eus 10.0 | rustfmt-debuginfo | 0:1.84.1-1.el10_0.4 |
| Red Hat hummingbird 1 | libgit2 | 0:1.9.7-1.hum1 |
| Red Hat hummingbird 1 | libgit2-devel | 0:1.9.7-1.hum1 |
| Red Hat rhel e4s 9.4 | cargo | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | cargo-debuginfo | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | clippy | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | clippy-debuginfo | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-analyzer | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-analyzer-debuginfo | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-debugger-common | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-debuginfo | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-debugsource | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-doc | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-gdb | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-lldb | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-src | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-std-static | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-std-static-wasm32-unknown-unknown | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-std-static-wasm32-wasi | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rust-toolset | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rustfmt | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel e4s 9.4 | rustfmt-debuginfo | 0:1.75.0-1.el9_4.1 |
| Red Hat rhel eus 9.6 | cargo | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | cargo-debuginfo | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | clippy | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | clippy-debuginfo | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-analyzer | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-analyzer-debuginfo | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-debugger-common | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-debuginfo | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-debugsource | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-doc | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-gdb | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-lldb | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-src | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-std-static | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-std-static-debuginfo | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-std-static-wasm32-unknown-unknown | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-std-static-wasm32-wasip1 | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rust-toolset | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rustfmt | 0:1.84.1-1.el9_6.1 |
| Red Hat rhel eus 9.6 | rustfmt-debuginfo | 0:1.84.1-1.el9_6.1 |
| Rocky Linux 10 | rust | 0:1.92.0-2.el10_2 |
| Rocky Linux 9 | rust | 0:1.92.0-2.el9_8 |
| Ubuntu 24.04 LTS | libgit2 | 1.7.2+ds-1ubuntu3.1 |
| Ubuntu 26.04 LTS | libgit2 | 1.9.1+ds-1ubuntu1.1 |
| Ubuntu Pro 14.04 LTS | libgit2 | 0.19.0-2ubuntu0.4+esm2 |
| Ubuntu Pro 16.04 LTS | libgit2 | 0.24.1-2ubuntu0.2+esm3 |
| Ubuntu Pro 18.04 LTS | libgit2 | 0.26.0+dfsg.1-1.1ubuntu0.2+esm2 |
| Ubuntu Pro 20.04 LTS | libgit2 | 0.28.4+dfsg.1-2ubuntu0.1+esm1 |
| Ubuntu Pro 22.04 LTS | libgit2 | 1.1.0+dfsg.1-4.1ubuntu0.1+esm1 |
| openSUSE Tumbleweed | libgit2 | 1.9.6-1.1 |