Update ghidra to 12.1.4

[gominimal-pkgmgr-mgr]

Update ghidra 12.1.3 → 12.1.4

Source: github:NationalSecurityAgency/ghidra:release-asset
Release: https://github.com/NationalSecurityAgency/ghidra/releases/tag/12.1.4
Changelog: NationalSecurityAgency/ghidra@12.1.3...12.1.4
Released: unknown (non-GitHub source or tag-only fallback)

Note

Auto-applied structural fixes:

• Bumped the source URL build-date 20260817 → 20260921: the asset filename embeds a release date the %{version} template can't track, so the persisted URL would otherwise 404 at build time on the stale date.

Vulnerability impact

Partition analysis at 12.1.4 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

• 3 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.
• 1 still affecting — the new version matches the advisory's range, the fix hasn't been published, OR the advisory lacks structured range data so partition defaulted to still-affecting (the conservative pick). Rows marked ⚠ unverified are the latter case.

Vulnerabilities fixed (3)

This update clears 3 vulnerabilities affecting 12.1.3:

CVE / GHSA	Severity	Fixed in
GHSA-4w7g-wmg8-fgv5	MEDIUM	12.1.4
GHSA-c3pf-92jf-vq96	MEDIUM	12.1.4
GHSA-vxmq-6v38-hgf6	MEDIUM	12.1.4

Warning

1 known vulnerabilities still affect 12.1.4 after this update.

CVE / GHSA	Severity	Fixed in
GHSA-8pr2-46mf-v2r2	MEDIUM	12.2

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)

	Component	Old	New
~	ghidra	12.1.3	12.1.4
~	ghidra-upstream	12.1.3	12.1.4

Changes

	Old	New
Version	12.1.3	12.1.4
SHA256	93a5d11a9ad51062...	ddac49f903da9d5b...
Size		569.6 MB
Source	https://github.com/NationalSecurityAgency/ghidra/releases/download/Ghidra_12.1.3_build/ghidra_12.1.3_PUBLIC_20260817.zip	https://github.com/NationalSecurityAgency/ghidra/releases/download/Ghidra_12.1.4_build/ghidra_12.1.4_PUBLIC_20260921.zip

• License: Apache-2.0 (source: GitHub + tarball)

---

Created by pkgmgr

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: gominimal/pkgs/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: b1548220-ffad-4c54-aa1f-ce4babc9843c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}