Command Injection

github.com/rancher/wrangler is vulnerable to Command Injection attacks. An attacker is able to change the library's behavior and cause confusion when a specially crafted command is executed through Git, because it uses the underlying Git binary present on the host OS or container image...

Critical Photon OS Security Update - PHSA-2023-3.0-0526

Updates of 'mariadb', 'git' packages of Photon OS have been released...

Fedora: Security Advisory for git-credential-oauth (FEDORA-2023-2663dc67d8)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for git-credential-oauth (FEDORA-2023-267503a090)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: git-credential-oauth-0.4.1-1.fc37

A Git credential helper that authenticates to GitHub, GitLab, BitBucket and other forges using OAuth. The first time you push, the helper will open a browser window to authenticate. Subsequent pushes within the cache timeout require no interaction...

[SECURITY] Fedora 36 Update: git-credential-oauth-0.1.5-1.fc36

A Git credential helper that authenticates to GitHub, GitLab, BitBucket and other forges using OAuth. The first time you push, the helper will open a browser window to authenticate. Subsequent pushes within the cache timeout require no interaction...

Fedora 36 : git-credential-oauth (2023-2663dc67d8)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-2663dc67d8 advisory. Rebuild for security fix Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...

@unete/cli (>=1.0.0-13, <=1.0.0-17), bootcamp-cli (0.0.1) potentially affected by CVE-2024-21531 via git-shallow-clone (0.0.2)

git-shallow-clone NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on git-shallow-clone and may be impacted: - @unete/cli =1.0.0-13, =1.0.0-17 - bootcamp-cli 0.0.1 Source cves: CVE-2024-21531 Source advisory: SNYK:JS-GITSHALLOWCLONE-32538...

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' due to missing sanitization or mitigation flags in the process variable of the gitShallowClone function. PoC javascript const clone =...

Denial Of Service (DoS)

github.com/rancher/wrangler is vulnerable to Denial Of Service DoS. The vulnerability exists in multiple functions of git.go as it does not properly validate the Git credential user input, which allows an attacker to cause an application crash by providing maliciously crafted Git credentials...

[SECURITY] Fedora 36 Update: rust-pretty-git-prompt-0.2.1-15.fc36

Your current git repository information inside a beautiful shell prompt...

[SECURITY] Fedora 36 Update: rust-gitui-0.20.1-6.fc36

Blazing fast terminal-ui for git...

[SECURITY] Fedora 36 Update: rust-exa-0.10.1-9.fc36

exa is a modern replacement for the command-line program ls that ships with Unix and Linux operating systems, with more features and better defaults. It uses colours to distinguish file types and metadata. It knows about symlinks, extended attributes, and Git. And it=EF=BF=BD=EF=BF =BD=EF=BF=BDs...

Debian dla-3303 : ruby-git - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3303 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3303-1 [email protected]...

Fedora: Security Advisory for rust-pretty-git-prompt (FEDORA-2023-3ec32f6d4e)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Debian: Security Advisory (DLA-3303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-3303-1 ruby-git - security update

Bulletin has no description...

The vulnerability of the mechanism for determining attributes for paths in Git’s distributed version control system, allowing a perpetrator to execute arbitrary code.

The vulnerability of the mechanism for determining attributes for paths in the Git distributed version control system’s gitattributes mechanism is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created...

[SECURITY] [DLA 3303-1] ruby-git security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3303-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 31, 2023 https://wiki.debian.org/LTS -...

[SECURITY] Fedora 36 Update: libgit2-1.3.2-1.fc36

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...