11409 matches found
RHEL 7 : rh-git218-git (RHSA-2020:1503)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1503 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...
SUSE: Security Advisory (SUSE-SU-2023:0109-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Heap Use After Free in function ins_compl_get_exp
Description Heap Use After Free in function inscomplgetexp at insexpand.c:3846 vim version git log commit 7193323b7796c05573f3aa89d422e848feb3a8dc HEAD - master, tag: v9.0.1223, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochuaf01s.dat -c :qa!...
Fedora: Security Advisory for git (FEDORA-2023-9718cc6113)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: git-2.39.1-1.fc36
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...
[SECURITY] Fedora 37 Update: git-2.39.1-1.fc37
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...
SUSE SLES15: git / git-arch / git-core / git-cvs / git-daemon / git-doc / etc (SUSE-SU-2023:0108-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0108-1 advisory. - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an...
Fedora 37 : git (2023-9718cc6113)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9718cc6113 advisory. Update to 2.39.1 CVE-2022-41903, CVE-2022-23521 Refer to the upstream release notes and the security advisories CVE-2022-41903, CVE-2022-23521 for...
Fedora 36 : git (2023-746c4aacce)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-746c4aacce advisory. Update to 2.39.1 CVE-2022-41903, CVE-2022-23521 Refer to the upstream release notes and the security advisories CVE-2022-41903, CVE-2022-23521 for...
SUSE SLED15: git / git-arch / git-core / git-credential-gnome-keyring / etc (SUSE-SU-2023:0110-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0110-1 advisory. - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands...
SUSE SLES12: git / git-arch / git-core / git-cvs / git-daemon / git-doc / etc (SUSE-SU-2023:0109-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0109-1 advisory. - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an...
FreeBSD : shells/fish -- arbitrary code execution via git (a3b10c9b-99d9-11ed-aa55-d05099fed512)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a3b10c9b-99d9-11ed-aa55-d05099fed512 advisory. - fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary cod...
abacuz (0.1.1), addupstream (0.2.4) +800 more potentially affected by CVE-2023-22742 via libgit2-sys (>=0.1.13, <=0.13.2+1.4.2)
libgit2-sys CARGO version =0.1.13, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =3.1.3, =3.10.0 - asmuthbloomsecretsharing 0.2.2 - assemble 0.1.2 and more Source cves: CVE-2023-22742 Source advisory: OSV:GHSA-M4CH-RFV5-X5G3...
CVE-2023-22742
CVE-2023-22742 affects libgit2 when using SSH with the optional libssh2 backend. The issue is that certificate checking is not performed by default unless a certificate_check callback is explicitly configured in git_remote_callbacks, enabling potential MITM if server SSH keys are not validated. T...
Remote Code Execution(RCE)
git is vulnerable to Remote Code ExecutionRCE. When parsing gitattributes, multiple integer overflows may occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge, causing overflows to be triggered via a...
SUSE-SU-2023:0110-1 Security update for git
This update for git fixes the following issues: - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an integer overflow that could be triggered when parsing a gitattributes file bsc1207032...
SUSE-SU-2023:0109-1 Security update for git
This update for git fixes the following issues: - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an integer overflow that could be triggered when parsing a gitattributes file bsc1207032...
SUSE-SU-2023:0108-1 Security update for git
This update for git fixes the following issues: - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an integer overflow that could be triggered when parsing a gitattributes file bsc1207032...
Ubuntu: Security Advisory (USN-5810-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
