[SECURITY] Fedora 37 Update: GitPython-3.1.30-1.fc37

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. It provides abstractions of git objects for easy access of repository data, a nd additionally allows you to access the git repository more directly using eith er a...

Out-of-bounds Write in function do_string_sub

Out-of-bounds Write in function dostringsub at eval.c:7338 vim version git log commit ea720aea851e645f4c8ec3b20afb27c7ca38184c HEAD - master, tag: v9.0.1137, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S ./pochow01s.dat -c :qa!...

Fedora 35 : git (2022-53aadd995f)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-53aadd995f advisory. Upstream update including security & bug fixes as well as feature enhancements. From the upstream release notes: CVE-2022-39253 -------------- When...

Fedora 36 : git (2022-8b58806840)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-8b58806840 advisory. Upstream update including security & bug fixes as well as feature enhancements. From the upstream release notes: CVE-2022-39253 -------------- When...

DEBIAN-CVE-2022-38065

A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead increased privileges...

@51jbs/incremental-coverage-plugin (1.0.5), @51jbs/spec-plugin (2.0.0) +202 more potentially affected by CVE-2022-25860 +1 more via simple-git (>=3.0.3, <=3.15.1)

simple-git NPM version =3.0.3, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =1.4.0, =5.15.0, =10.0.0-version-usage.0, =1.0.1, =2.0.0, =1.1.0, =1.1.0, =0.0.0-semantic-release, =0.0.1-semantic-release - @colliercz/gatsby-transformer-gitinfo 1.3.0 and more Source cves: CVE-2022-25860, CVE-2022-25912 Source...

Remote Code Execution (RCE)

Overview simple-git is a light weight interface for running git commands in any node.js application. Affected versions of this package are vulnerable to Remote Code Execution RCE via the clone, pull, push and listRemote methods, due to improper input sanitization. This vulnerability exists due to...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Git-Scm Git

docker host file read using cve-2022-39253 poc PoC r...

[SECURITY] [DLA 3239-2] git regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3239-2 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler December 14, 2022 https://wiki.debian.org/LTS -...

Debian dla-3239 : git - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3239 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3239-2 [email protected]...

Debian: Security Advisory (DLA-3239-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-3239-2 git - regression update

Bulletin has no description...

The vulnerability of the SSH Host Key Verification component of the Jenkins Git Client Plugin allows a perpetrator to execute a “man-in-the-middle” type attack.

The vulnerability of the SSH Host Key Verification component in the Jenkins Git Client Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack remotely...

The vulnerability of the Webhook Endpoint component of the Jenkins Git Plugin, related to the disclosure of information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Webhook Endpoint component of the Jenkins Git Plugin relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

[SECURITY] [DLA 3239-1] git security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3239-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler December 13, 2022 https://wiki.debian.org/LTS -...

DLA-3239-1 git - security update

Bulletin has no description...

CVE-2022-25912 Remote Code Execution (RCE)

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

CVE-2022-25912

CVE-2022-25912 affects the Node.js simple-git module prior to 3.16.0, with remote code execution via the ext transport protocol during clone() (incomplete fix of CVE-2022-24066). Several connected sources corroborate RCE via clone()/pull()/push()/listRemote() paths when input is crafted, with exp...

CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

CVE-2022-25912 Remote Code Execution (RCE)

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...