CVE-2026-53583

In libgit2 before 1.8.6 and 1.9.5, verify_server_cert in src/libgit2/streams/openssl.c uses an inverted !!memcmp in the GEN_IPADD branch, so OpenSSL builds accept mismatched IP SubjectAltName certificates and reject matching ones, enabling a network attacker to intercept IP-literal HTTPS connecti...