Rocky Linux 8.8 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (ciqsa-2026_1106)

The Rocky Linux 8.8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261106 advisory. This advisory aggregates security fixes for the git SRPM in CIQ LTS 8.8. It addresses 5 CVEs: CVE-2024-32021, CVE-2024-32002, CVE-2024-32020,...

Rocky Linux 9 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (crlsa-2024_4083)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244083 advisory. git: Recursive clones RCE CVE-2024-32002 git: RCE while cloning local repos CVE-2024-32004 git: additional local RCE CVE-2024-32465 git: insecure hardlinks...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2021_3074)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213074 advisory. nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl CVE-2021-23362 nodejs-ssri: Regular expression DoS ReDoS when...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2021_3073)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20213073 advisory. nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl CVE-2021-23362 nodejs-ssri: Regular expression DoS ReDoS when...

GitPython submodule update path traversal can write outside the repository

Affected: GitPython 3.1.61 latest release and main — git/objects/submodule/base.py. git diff 3.1.61 origin/main -- git/objects/submodule/ is empty, so both are identical here. --- The gap The fix for GHSA-hmq2-w58f-27jc added Submodule.validatedname and wired it into update and five siblings,...

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

Summary Repo.init decides which directory is the git directory by testing candidate paths in an order that considers the real .git last. Two earlier tests can be satisfied by ordinary tracked files. Git reserves only the literal name .git, so HEAD, objects/, refs/, config, gitdir, commondir and...

EUVD-2026-74843

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution...

CLEANSTART-2025-KP82477 malicious third-party can give a crafted "ssh://

Security vulnerability affects the git package. A malicious third-party can give a crafted "ssh://...

CLEANSTART-2026-QG10579 Git before 2

Security vulnerability affects the git package. Git before 2...

CLEANSTART-2026-XD17499 Arbitrary command execution is possible in Git before 2

Security vulnerability affects the git package. Arbitrary command execution is possible in Git before 2...

CLEANSTART-2026-LI11422 issue was found in Git before v2

Security vulnerability affects the git package. An issue was found in Git before v2...

CLEANSTART-2026-ZD06133 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CLEANSTART-2026-WE62542 issue was found in Git before v2

Security vulnerability affects the git package. An issue was found in Git before v2...

CLEANSTART-2025-CH00091 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CLEANSTART-2025-OK96384 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'

Security vulnerability affects the git package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

CLEANSTART-2025-GZ59360 issue was found in Git before v2

Security vulnerability affects the git package. An issue was found in Git before v2...

CLEANSTART-2026-PC25111 Git is an open-source distributed revision control system

Security vulnerability affects the git package. Git is an open-source distributed revision control system...

CLEANSTART-2026-EQ09700 Git is a distributed revision control system

Security vulnerability affects the git package. Git is a distributed revision control system...

CLEANSTART-2026-BE06900 Git is an open source, scalable, distributed revision control system

Security vulnerability affects the git package. Git is an open source, scalable, distributed revision control system...

CLEANSTART-2026-DU64203 Git is an open source, scalable, distributed revision control system

Security vulnerability affects the git package. Git is an open source, scalable, distributed revision control system...