797 matches found
Fedora 39 : rust-asyncgit / rust-bat / rust-cargo-c / rust-eza / etc (2024-8ba389815f)
The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-8ba389815f advisory. - Update the git2 crate to version 0.18.2. - Update the libgit2-sys crate to version 0.16.2. Version 0.16.2 of the libgit2-sys crate includes an...
[SECURITY] Fedora 38 Update: libgit2-1.6.5-1.fc38
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
[SECURITY] Fedora 39 Update: libgit2_1.6-1.6.5-1.fc39
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
[SECURITY] Fedora 39 Update: libgit2-1.7.2-1.fc39
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...
Fedora 38 : libgit2 (2024-a7a3c8ccdd)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a7a3c8ccdd advisory. Update to 1.6.5 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575 Tenable has extracted the preceding description block directly from the Fedora...
Fedora: Security Advisory (FEDORA-2024-92bac3b909)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 39 : libgit2 (2024-92bac3b909)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-92bac3b909 advisory. Update to 1.7.2 Resolves: CVE-2024-24577 Resolves: CVE-2024-24575 Tenable has extracted the preceding description block directly from the Fedora...
libgit2 is vulnerable to a denial of service attack in `git_revparse_single`
...
GHSA-22Q8-GHMQ-63VF libgit2-sys affected by memory corruption, denial of service, and arbitrary code execution in libgit2
The libgit2 project fixed three security issues in the 1.7.2 release. These issues are: The gitrevparsesingle function can potentially enter an infinite loop on a well-crafted input, potentially causing a Denial of Service. This function is exposed in the git2 crate via the...
libgit2-sys affected by memory corruption, denial of service, and arbitrary code execution in libgit2
The libgit2 project fixed three security issues in the 1.7.2 release. These issues are: The gitrevparsesingle function can potentially enter an infinite loop on a well-crafted input, potentially causing a Denial of Service. This function is exposed in the git2 crate via the...
a-gpt (>=0.1.0, <=0.4.0), abacuz (0.1.1) +1146 more potentially affected by unknown CVE via libgit2-sys (>=0.1.13, <=0.15.2+1.6.4)
libgit2-sys CARGO version =0.1.13, =0.1.0, =1.1.0, =0.0.1, =0.3.0, =1.0.0, =0.1.0, =0.1.0, =0.3.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-22Q8-GHMQ-63VF...
libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`
...
Debian: Security Advisory (DSA-5619-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dsa-5619 : libgit2-1.1 - security update
The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5619 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5619...
[SECURITY] [DSA 5619-1] libgit2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5619-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 09, 2024 https://www.debian.org/security/faq -...
FreeBSD : Libgit2 -- multiple vulnerabilities (43768ff3-c683-11ee-97d0-001b217b3468)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 43768ff3-c683-11ee-97d0-001b217b3468 advisory. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a...
DSA-5619-1 libgit2 - security update
Bulletin has no description...
eza Potential Heap Overflow Vulnerability for AArch64
Summary In eza, there exists a potential heap overflow vulnerability, first seen when using Ubuntu for Raspberry Pi series system, on ubuntu-raspi kernel, relating to the .git directory. Details The vulnerability seems to be triggered by the .git directory in some projects. This issue may be...
GHSA-3QX3-6HXR-J2CH eza Potential Heap Overflow Vulnerability for AArch64
Summary In eza, there exists a potential heap overflow vulnerability, first seen when using Ubuntu for Raspberry Pi series system, on ubuntu-raspi kernel, relating to the .git directory. Details The vulnerability seems to be triggered by the .git directory in some projects. This issue may be...
SUSE CVE-2024-24575
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitrevparsesingle can cause the function to enter an infinite loop, potentially causing a Denial ...