Amazon Linux 2 : git (ALAS-2024-2548)

The version of git installed on the remote host is prior to 2.40.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2548 advisory. Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories...

CVE-2024-32002

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a .git/ directory...

CVE-2024-32004

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute arbitrary code during the operation. The problem has been patched in versions 2.45.1, 2.44.1,...

The vulnerability of the distributed Git version control system for Windows lies in the use of an unreliable path for checking orthography of cloned repositories, allowing a perpetrator to execute arbitrary code.

The vulnerability of the distributed Git version control system for Windows is related to the use of an unreliable path for checking orthography of cloned repositories. Exploiting this vulnerability allows a perpetrator to execute arbitrary code...

tsMuxer Security Vulnerabilities

tsMuxer is a transport stream multiplexer for remixing/multiplexing elementary streams by Dan Personal Developer. A security vulnerability exists in the tsMuxer git-2539d07 version. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...

tsMuxer Security Vulnerabilities

tsMuxer is a transport stream multiplexer for remixing/multiplexing elementary streams by Dan Personal Developer. A security vulnerability exists in the tsMuxer git-2539d07 version. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor...

Security fix for the ALT Linux 10 package git version 2.33.8-alt1

2.33.8-alt1 built May 2, 2023 Dmitry V. Levin in task 319522 April 17, 2023 Dmitry V. Levin - 2.33.7 - 2.33.8 fixes: CVE-2023-25652, CVE-2023-25815, CVE-2023-29007...

SUSE CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

git security update

2.31.1-3 - Fixes CVE-2022-23521 and CVE-2022-41903 - Tests: try harder to find open ports for apache, git, and svn - Resolves: 2162063...

Security fix for the ALT Linux 10 package git version 2.33.5-alt1

2.33.5-alt1 built Oct. 22, 2022 Dmitry V. Levin in task 308655 Oct. 6, 2022 Dmitry V. Levin - 2.33.4 - 2.33.5 fixes: CVE-2022-39253, CVE-2022-39260...

parse-url information disclosure vulnerability

parse-url is an advanced url parser with git url support. An information disclosure vulnerability exists in versions of parse-url prior to 7.0.0, which can be exploited by attackers to expose sensitive information to unauthorized participants...

Octopus Server 安全漏洞

Octopus Server is an automated deployment platform. A security vulnerability in all 2021.3.x versions prior to Octopus Server version 2021.3.12725 and all 2022.1.x versions prior to 2022.1.2454 stems from not properly validating permissions in the API for projects that use Git version control. Th...

PT-2022-13917 · Octopus Deploy +1 · Octopus Server +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns improper verification of permissions in the API for projects using Git version control. This flaw allows users with only ProjectView...

CVE-2021-41959

JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory leak...

CVE-2021-41959

Removed by vendor...

JerryScript Git 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript Git version 14ff5bf, which stems from not adequately tracking and freeing allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after a RegExp...

Security fix for the ALT Linux 10 package git version 2.33.2-alt1

2.33.2-alt1 built April 19, 2022 Dmitry V. Levin in task 298588 March 23, 2022 Dmitry V. Levin - 2.33.1 - 2.33.2 fixes: CVE-2022-24765...

ae-django-utils (=0.3.1), apollo-sdk (>=0.2.0 <=0.2.11) +32 more potentially affected by CVE-2021-45452 via django (>=4.0.0 <=4.0.0rc1)

django PYPI version =4.0.0, =0.2.0, =0.6.1, =2.16.1, =0.1.5, =1.0.7, =0.9.0, =0.4.0, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45452 Source advisory: OSV:PYSEC-2022-3...

Stored XSS vulnerability in git

git 4.8.2 and earlier does not escape the Git SHA-1 checksum parameters provided to commit notifications when displaying them in a build cause. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to submit crafted commit notifications to the...

DEBIAN-CVE-2021-40330

gitconnectgit in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring...