RHEL 8 : git (RHSA-2024:7701)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:7701 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...

GHSA-FM76-W8JW-XF8M @saltcorn/plugins-loader unsanitized plugin name leads to a remote code execution (RCE) vulnerability when creating plugins using git source

Summary When creating a new plugin using the git source, the user-controlled value req.body.name is used to build the plugin directory where the location will be cloned. The API used to execute the git clone command with the user-controlled data is childprocess.execSync. Since the user-controlled...

RHSA-2024:3346 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:2724 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:7449 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:7455 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:7456 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:7351 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:7135 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:7136 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:7203 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

SUSE CVE-2024-47516

A vulnerability was found in Pagure. An argument injection in Git during retrieval of the repository history leads to remote code execution on the Pagure instance...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Moderate: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update as...

Moderate: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.4 Telecommunications Update Service. Red Hat Product Security has rated this update as...

git-shallow-clone Argument Injection vulnerability

All versions of the package git-shallow-clone are vulnerable to Argument injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function...

GHSA-QWRQ-VXVW-537R git-shallow-clone Argument Injection vulnerability

All versions of the package git-shallow-clone are vulnerable to Argument injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function...

CVE-2024-21531

All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function...

CVE-2024-21531

All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function...

CVE-2024-21531

All versions of the package git-shallow-clone are vulnerable to Command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function...