Gitmails

Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...

Debian dla-4831 : libgit2-1.5 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4831 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4831-1 [email protected]...

Astra Linux – Vulnerability in libgit2

libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Previous versions of libgit2 required the caller to set the certificatecheck field of the libgit2’s...

Astra Linux – vulnerability in libgit2

An issue was found in libgit2 prior to version 0.28.4 and in versions 0.9x prior to 0.99.0. path.c mishandles equivalent filenames that exist due to NTFS Alternate Data Streams. This may enable remote code execution when cloning a repository. This issue is similar to CVE-2019-1352...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libgit2 vulnerabilities (USN-8628-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8628-1 advisory. It was discovered that libgit2 incorrectly handled the Git Smart Protocol. A remote attacker...

Ubuntu 24.04 LTS / 26.04 LTS : libgit2 vulnerability (USN-8907-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8907-1 advisory. It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a...

[SECURITY] [DLA 4831-1] libgit2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4831-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 12, 2026 https://wiki.debian.org/LTS -...

USN-8907-1: libgit2 vulnerability

It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate could possibly use this issue to perform a machine-in-the-middle attack, leading to the exposure of sensitive information...

USN-8907-1 libgit2 vulnerability

It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate could possibly use this issue to perform a machine-in-the-middle attack, leading to the exposure of sensitive information...

CLEANSTART-2024-DS47827 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application

Security vulnerability affects the eza package. libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application...

Rocky Linux 10.2 [CIQ] Security Update: cargo / cargo-debuginfo / clippy / clippy-debuginfo / rust / etc (crlsa-2026_67286)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667286 advisory. libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server CVE-2026-53587 Tenable has extracted the preceding description bloc...

AlmaLinux 9.6 [TuxCare] Security Update: cargo / clippy / rust / rust-analyzer / rust-debugger-common / etc (ALMALINUX9.6:CLSA-2026:1790157025)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790157025 advisory. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git...

Rocky Linux 9.6 [TuxCare] Security Update: cargo / clippy / rust / rust-analyzer / rust-debugger-common / etc (ALMALINUX9.6:CLSA-2026:1790157025)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790157025 advisory. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git...

Rocky Linux 9 [CIQ] Security Update: cargo / cargo-debuginfo / clippy / clippy-debuginfo / rust / etc (crlsa-2026_67285)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667285 advisory. libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server CVE-2026-53587 Tenable has extracted the preceding description block...

Amazon Linux 2023 : network-flow-monitor-agent (ALAS2023-2026-3116)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3116 advisory. Smithy-RS is a Rust code generation and runtime framework that generates HTTP clients and servers from Smithy interface definitions, powering the AWS SDK for Rust and custom service...

Important: network-flow-monitor-agent

Issue Overview: libgit2 version 1.9.4 and below is vulnerable to a heap out-of-bounds read in setdata in src/libgit2/transports/smartpkt.c. The vulnerable code uses a fixed-size strncmp smartpkt.c:239 against the unvalidated capability buffer of a smart-protocol pkt-line. When the bytes following...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libgit2 vulnerability (USN-8809-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8809-1 advisory. Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using th...

USN-8809-1: libgit2 vulnerability

Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using the SSH transport. A remote attacker could possibly use this issue to execute arbitrary commands...

USN-8809-1 libgit2 vulnerability

Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using the SSH transport. A remote attacker could possibly use this issue to execute arbitrary commands...

CLSA-2026-1790157025 rust: Fix of CVE-2026-53587

CVE-2026-53587: bounds-check the capability buffer before the fixed-size object-format= comparison in setdata, so a short pkt-line cannot cause a heap out-of-bounds read vendored libgit2 1.8.1; the vendored libgit2 1.3.0 copy has no object-format parsing and is unaffected...