RHSA-2024:4934 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:4933 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:4546 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:4545 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:4543 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:2699 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

RHSA-2024:2079 Red Hat Security Advisory: git-lfs security update

Bulletin has no description...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2024-18945 · Unknown · Git-Shallow-Clone

Name of the Vulnerable Software and Affected Versions: git-shallow-clone versions all Description: The issue is related to command injection due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function. This allows for potential argument injection. No...

RHEL 9 : git-lfs (RHSA-2024:7351)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:7351 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...

Rocky Linux 8 : git-lfs (RLSA-2024:7135)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:7135 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenabl...

Rocky Linux 9 : git-lfs (RLSA-2024:7136)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:7136 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenabl...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002-PoC Proof of Concep...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002-POC This is a demo...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Oracle Linux 9 : git-lfs (ELSA-2024-7136)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-7136 advisory. 3.4.1-4 - Rebuild with new Golang - Resolves: RHEL-57920 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Oracle Linux 8 : git-lfs (ELSA-2024-7135)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2024-7135 advisory. 3.4.1-3 - Rebuild with new Golang - Resolves: RHEL-57900 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

RHEL 9 : git-lfs (RHSA-2024:7203)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:7203 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...

AlmaLinux 8 : git-lfs (ALSA-2024:7135)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:7135 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenable...

AlmaLinux 9 : git-lfs (ALSA-2024:7136)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2024:7136 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156 Tenable...