USN-8907-1: IP address SubjectAltName check flaw in libgit2

Advisory USN-8907-1, published by the Ubuntu Security feed on October 8, 2026, describes a flaw in libgit2, a library used for Git operations. The problem lies in the SubjectAltName check for IP addresses during TLS certificate validation. According to the text, a remote attacker holding a certificate trusted by a certificate authority could possibly exploit the flaw to carry out a man-in-the-middle attack and expose confidential information. The provided content is an automatic translation of the original notice. To consult and verify, open the official notice through the Ubuntu Security channel, checking the identifier USN-8907-1 and the package versions listed. Rota Nacional does not patch third-party libraries and offers no libgit2 feature; the relevance for an organization is to inventory systems using this library and apply the vendor updates. If your team uses AI to study the notice, do not paste certificates, private keys, tokens or internal server names into the prompt.