CVE and update status of the FreeBSD ports tree3,296 unaddressed CVEs in 671 portsAll times are CET
Port details

devel/libgit2 1.9.7

Portable, pure C implementation of the Git core

Port info

Maintainer
mfechner@FreeBSD.org
Packages
latest: 1.9.7
Upstream
up to date
Last update
to 1.9.7 · 265edfbeec
Quarterly
2026Q4: 1.9.7
WWW
https://libgit2.org
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install libgit2
installs 1.9.7 from latest; from quarterly (2026Q4) 1.9.7
Port
# cd /usr/ports/devel/libgit2 && make install clean
# make -C /usr/ports/devel/libgit2 config  # change options first
Size
791 KiB download · 3.2 MiB installed
Depends on
devel/pcre2 10.49, security/libssh2 1.11.1_1,3, www/llhttp 9.4.3
License
GPLv2
Options
1 of 1 on in the package: SSH

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.9.71.9.7–
FreeBSD 151.9.71.9.7–
FreeBSD 141.9.71.9.71.9.7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.9.71.9.7–
FreeBSD 141.9.71.9.71.9.7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.9.7.

Fixed (11)

Show 11 fixed
VuXML entries whose affected range the packaged version has left, plus CVEs from the last 90 days that this version is already past (fixed by update).
CVECVSSPublishedDescription
CVE-2026-59178.62026-08-11libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerability that allows rem…
CVE-2026-535877.52026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application…
CVE-2026-535866.52026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application…
CVE-2026-535836.52026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application…
CVE-2026-535855.32026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application…
CVE-2026-535844.32026-08-20libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application…

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
288120maintainer-feedback? devel/libgit2 1.9.1 build fails when openssl35 MD4=offNew2025-07-21

Commits (98)

Matthias Fechner (mfechner) · 0.27.5
Security update of devel/libgit2 and depending ports to fix seceurity vulnerabilities. For more details see here: https://github.com/libgit2/libgit2/releases/tag/v0.27.5

Approved by:	mentors (implicit)
MFC after:	1d
MFH:		2018Q4
Security:	8c08ab4c-d06c-11e8-b35c-001b217b3468
46a56131ee
Matthias Fechner (mfechner) · 0.27.4
Update devel/libgit2 and devel/rubygem-rugged to 0.27.4 which is required for gitlab-ce 11.2.x.

Approved by:	mentors (implicit)
ffd7679db4
Matthias Fechner (mfechner) · 0.27.3
Update to 0.27.3 which fixes some security vulnerabilities.

Reviewed by:	swills (mentor)
Approved by:	swills (mentor)
MFH:		2018Q3
Security:	3c9b7698-84da-11e8-8c75-d8cb8abf62dd
Differential Revision:	https://reviews.freebsd.org/D16225
8710fc0281
Matthias Fechner (mfechner) · 0.27.2
Update libgit2 to 0.27.2 and removed obsolete patches from it as it is fixed upstream now. Update devel/rubygem-rugged to 0.27.2 and took maintainer-ship for it as it is a core module required for gitlab. Added comment suggest by mat that some ports should be updated together.

Reviewed by:	mat, swills (mentor)
Approved by:	swills (mentor)
Differential Revision:	https://reviews.freebsd.org/D15901
8b98d50ed7
Matthias Fechner (mfechner) · 0.27.1
Took maintainer (approved by wg). Security update to 0.27.1.

Reviewed by:	wg (maintainer), tz (mentor)
Approved by:	wg (maintainer), tz (mentor)
MFH:		2018Q2
Differential Revision:	https://reviews.freebsd.org/D15654
860b9eb055
Raphael Kubo da Costa (rakuco) · 0.27.0_1
devel/libgit2-glib: Unbreak with libgit2 0.27.

The fix is two-fold:
* Adjust the path for the sed call in devel/libgit2 so that we leave out
  openssl from libgit2.pc's Requires.private line, otherwise libgit2-glib will
  look for openssl.pc, which does not exist when OpenSSL from base is used.

* Reset libgit2-glib back to 0.26, and import a patch both Arch Linux and
  openSUSE have been carrying to fix the build with libgit2 0.27. PORTEPOCH was
  not set because there is no libgit2-glib 0.27 and no package could have
  possibly been built after r469930.

Approved by:	mfechner, gnome (kwm)
Differential Revision:	https://reviews.freebsd.org/D15437
303fad494e
Matthias Fechner (mfechner) · 0.27.0
Update devel/libgit2 to 0.27.0 required for gitlab 10.7.x Updated patches to match new file locations.

Reviewed by:	swills (mentor), wg (maintainer)
Approved by:	swills (mentor), wg (maintainer)
Differential Revision:	https://reviews.freebsd.org/D15320
84a59c17ad
Bernard Spil (brnrd) · 0.26.0
devel/libgit2: Fix build with LibreSSL 2.7

- LibreSSL 2.7 adds OpenSSL 1.1 API

PR:		226954
Approved by:	wg (maintainer)
69eced1838
Torsten Zuehlsdorff (tz) · 0.26.0
devel/libgit2: Update from 0.25.1 to 0.26.0

Changelog: https://github.com/libgit2/libgit2/blob/v0.26.0/CHANGELOG.md

Submitted by: Matthias Fechner <idefix@fechner.net>
Approved by:  wg
6cffc8139e
William Grzybowski (wg) · 0.25.1_1
devel/libgit2: fix build with libressl

PR:		219362
Submitted by:	tobik
496d59403b
William Grzybowski (wg) · 0.25.1
devel/libgit2: update to 0.25.1
c11268084f
Mathieu Arnold (mat) · 0.24.0
Remove all USE_OPENSSL occurrences.

Sponsored by:	Absolight
a28f0f7f7f
Mark Linimon (linimon) · 0.24.0
Now builds on sparc64.

Approved by:	portmgr (tier-2 blanket)
8c33e9715e
Mathieu Arnold (mat) · 0.24.0
Use USES=pathfix where applicable.

PR:		213195
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D8093
a0bcd2cf68
Mathieu Arnold (mat) · 0.24.0
Fix usage of WITH_OPENSSL_BASE, WITH_OPENSSL_PORT and OPENSSL_PORT.

WITH_OPENSSL_* can't be set after bsd.port.pre.mk.
Fold all other usage into using SSL_DEFAULT == foo

PR:		210149
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	The FreeBSD Foundation, Absolight
Differential Revision:	https://reviews.freebsd.org/D6577
5b55a8a53e
Mathieu Arnold (mat) · 0.24.0
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight
4e1b79a0a6
Martin Wilke (miwi) · 0.24.0
- Update to 0.24.0

PR:		207792
Submitted by:	Torsten Zuehlsdorff
Approved by:	maintainer implicit
8d8846a644
Sunpoet Po-Chuan Hsieh (sunpoet) · 0.23.4
- Update to 0.23.4 - Use BROKEN_sparc64 - Fix space with tab

Changes:	https://github.com/libgit2/libgit2/releases
PR:		204862
Submitted by:	sunpoet (myself)
Approved by:	wg (maintainer)
f974ab3a04
Koop Mast (kwm) · 0.23.1
Update libgit2 to 0.23.1.

Add curl option for HTTP support.

Submitted by:	Andrey Cherkashin <andoriyu@gmail.com>
Approved by:	wg@
Differential Revision:	https://reviews.freebsd.org/D3494
ba15b039e4
Koop Mast (kwm) · 0.22.3
Update libgit2 to 0.22.3.

Approved by:	maintainer (implicit)
6b34971cd5
Koop Mast (kwm) · 0.22.2
Update libgit2 to 0.22.1. [1] Update libgit2-glib to 0.22.8. Update gitg to 3.16.1. Update py-pygit2 to 0.22.0. [1][3] Update rubygem-rugged to 0.22.1b1. [2]

This is done in one commit due to API/ABI breakage in libgit2.

PR:		196176	(based on)
Differential Revision:	https://reviews.freebsd.org/D2468
Submitted by:	lightside@gmx.com
Approved by:	maintainer (wg@ blanked) [1], ruby (swills@)[2]
Reviewed by:	koobs@ [3]
4a432dfdb2
Mathieu Arnold (mat) · 0.21.1_1
Update ports in the [bcd]* categories to not use GH_COMMIT.

With minor cleanups to make things simpler.

With hat:	portmgr
Sponsored by:	Absolight
c6457ffef4
William Grzybowski (wg) · 0.21.1_1
devel/libgit2: add THREADS option and make it default

PR:		196662
Submitted by:	rm
5b539370fe
Baptiste Daroussin (bapt) · 0.21.1
Cleanup plist
831295c29e
William Grzybowski (wg) · 0.21.1
devel/libgit2: update to 0.21.1

- USES python:build
8f91b9b30e
William Grzybowski (wg) · 0.21.0
devel/libgit2: update to 0.21.0
c7d0139944
William Grzybowski (wg) · 0.20.0_1
devel/libgit2: fix pkgconfig file and missing dependency

PR:		ports/185892
Submitted by:	amdmi3
8ad2ddd7f3
William Grzybowski (wg) · 0.20.0
devel/libgit2: update to 0.20.0
f81a955507
William Grzybowski (wg) · 0.19.0
devel/libgit2: allows stating

- Allows staging out of the box
3a232c8818
Baptiste Daroussin (bapt) · 0.19.0
Add NO_STAGE all over the place in preparation for the staging support (cat: devel part 3)
580a778a16
Alex Kozlov (ak) · 0.19.0
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
William Grzybowski (wg) · 0.19.0
devel/libgit2: update to 0.19.0

- Update to 0.19.0

Changes:
https://github.com/libgit2/libgit2/releases/tag/v0.19.0
f11eb65654
William Grzybowski (wg) · 0.18.0
devel/libgit2: update to 0.18.0

- Update to 0.18.0
- Take maintainership
6c4c28d448
Baptiste Daroussin (bapt) · 0.17.0
Back to the pool
8fe283e67e
Baptiste Daroussin (bapt) · 0.17.0
Fix USE_GITHUB in combinaison with MASTER_SITE= GHC which breaks WRKSRC

PR:		ports/177316
Submitted by:	William Grzybowski <william88@gmail.com>
Reported by:	miwi
c3431a718c
Max Brazhnikov (makc) · 0.17.0
- convert USE_CMAKE to USES - while here clean up some ports from CMAKE_VERBOSE, which is intended   for users

Approved by:	portmgr (miwi)
ffd97a0193
Baptiste Daroussin (bapt) · 0.17.0
Switch to USE_GITHUB Trim headers
1f30397d4f
Baptiste Daroussin (bapt) · 0.17.0
- update to 0.17.0

PR:		ports/168705
Submitted by:	sunpoet
6ab20d26c5
Baptiste Daroussin (bapt) · 0.16.0_1
Add the forgotten bump portrevision

Submitted by:	osa (private mail)
Feature safe:	yes
79ce433346
Baptiste Daroussin (bapt) · 0.16.0
Fix plist

Feature safe:	yes
178ea32291
Baptiste Daroussin (bapt) · 0.16.0
- update to 0.16.0

Feature safe:	yes
c20ee65416
Raphael Kubo da Costa (rakuco) · 0.15.0
Remove CMAKE_USE_PTHREAD from the ports using it.

This setting has not had any effect since r1.13 to bsd.cmake.mk, as it
was only useful when we supported FreeBSD < 7.

Approved by:	avilla (mentor), portmgr (miwi)
Feature safe:	yes
6fd8cb7810
Baptiste Daroussin (bapt) · 0.15.0
- update to 0.15.0
8e3add8ac4
Mark Linimon (linimon) · 0.14.0
Mark as broken on sparc64: thread-local storage not supported.
ee1f35d72b
Baptiste Daroussin (bapt) · 0.14.0
- update to 0.14.0
e5ab40fce7
Baptiste Daroussin (bapt) · 0.13.0
- update to 0.13.0 - switch to cmake
2a3b406495
Baptiste Daroussin (bapt) · 0.12.0
Fix typo in descr

Reported by: 	David Demelier (irc)
a5e21c0dee
Baptiste Daroussin (bapt) · 0.12.0
libgit2 is...

licensed under a very permissive license so you can use it anywhere
faster than any other Git library
written in standards compilant C99
completely multi-platform: Windows, Linux, Mac OS X, xBSD
compiled natively under all platforms (yes, even MSVC on Windows)
re-entrant, with sane error handling
designed with a solid and consistent API
available as bindings for all major scripting languages

WWW:	http://libgit2.github.com/
100c9520c0