# libgit2 security updates

Patch Radar has 26 security fixes for libgit2, closing 9 CVEs. The newest is DEBIAN-CVE-2026-5917 (1.9.0+ds-2+deb13u1), released August 20, 2026.

- Web page: https://patchblox.com/security/product/linux/libgit2
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-5917](https://patchblox.com/security/data/fix/linux/debian-cve-2026-5917.md) | Aug 20, 2026 | Debian 13.5 (trixie) 1.9.0+ds-2+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-5917](https://patchblox.com/security/data/fix/linux/debian-cve-2026-5917.md) | Aug 20, 2026 | Debian 14 1.9.7+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-5917](https://patchblox.com/security/data/fix/linux/debian-cve-2026-5917.md) | Aug 20, 2026 | Debian 12.15 (bookworm) 1.5.1+ds-1+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-53587](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53587.md) | Jul 31, 2026 | Debian 13.5 (trixie) 1.9.0+ds-2+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-53587](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53587.md) | Jul 31, 2026 | Debian 14 1.9.6+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-53585](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53585.md) | Jul 31, 2026 | Debian 14 1.9.6+ds-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53585](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53585.md) | Jul 31, 2026 | Debian 13.5 (trixie) 1.9.0+ds-2+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53585](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53585.md) | Jul 31, 2026 | Debian 12.15 (bookworm) 1.5.1+ds-1+deb12u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53584](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53584.md) | Jul 31, 2026 | Debian 13.5 (trixie) 1.9.0+ds-2+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53584](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53584.md) | Jul 31, 2026 | Debian 14 1.9.6+ds-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53584](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53584.md) | Jul 31, 2026 | Debian 12.15 (bookworm) 1.5.1+ds-1+deb12u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53586](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53586.md) | Jul 31, 2026 | Debian 13.5 (trixie) 1.9.0+ds-2+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53586](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53586.md) | Jul 31, 2026 | Debian 14 1.9.6+ds-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53586](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53586.md) | Jul 31, 2026 | Debian 12.15 (bookworm) 1.5.1+ds-1+deb12u2 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53583](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53583.md) | Jul 31, 2026 | Debian 13.5 (trixie) 1.9.0+ds-2+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-53583](https://patchblox.com/security/data/fix/linux/debian-cve-2026-53583.md) | Jul 31, 2026 | Debian 14 1.9.6+ds-1 | Routine | 1 | 0 |
| [DSA-5619-1](https://patchblox.com/security/data/fix/linux/dsa-5619-1.md) | Feb 9, 2024 | Debian 11.6 (bullseye) 1.1.0+dfsg.1-4+deb11u2 | Urgent | 1 | 0 |
| [DSA-5619-1](https://patchblox.com/security/data/fix/linux/dsa-5619-1.md) | Feb 9, 2024 | Debian 12.15 (bookworm) 1.5.1+ds-1+deb12u1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2024-24577](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24577.md) | Feb 6, 2024 | Debian 14 1.7.2+ds-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2024-24577](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24577.md) | Feb 6, 2024 | Debian 13.5 (trixie) 1.7.2+ds-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2024-24575](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24575.md) | Feb 6, 2024 | Debian 12.15 (bookworm) 1.5.1+ds-1+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-24575](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24575.md) | Feb 6, 2024 | Debian 13.5 (trixie) 1.7.2+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-24575](https://patchblox.com/security/data/fix/linux/debian-cve-2024-24575.md) | Feb 6, 2024 | Debian 14 1.7.2+ds-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-22742](https://patchblox.com/security/data/fix/linux/debian-cve-2023-22742.md) | Jan 20, 2023 | Debian 12.15 (bookworm) 1.5.1+ds-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-22742](https://patchblox.com/security/data/fix/linux/debian-cve-2023-22742.md) | Jan 20, 2023 | Debian 13.5 (trixie) 1.5.1+ds-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-22742](https://patchblox.com/security/data/fix/linux/debian-cve-2023-22742.md) | Jan 20, 2023 | Debian 14 1.5.1+ds-1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo