15407 matches found
[SECURITY] [DLA 4028-1] git-lfs security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4028-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura January 22, 2025 https://wiki.debian.org/LTS -...
Newline confusion in credential helpers can lead to credential exfiltration in git
...
Git does not sanitize URLs when asking for credentials interactively
...
DLA-4028-1 git-lfs - security update
Bulletin has no description...
SUSE: Security Advisory (SUSE-SU-2025:0197-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-4028 : git-lfs - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4028 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4028-1 [email protected] https://www.debian.org/lts/security/...
CBL Mariner 2.0 Security Update: git (CVE-2024-52006)
The version of git installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52006 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides...
CBL Mariner 2.0 Security Update: git (CVE-2024-50349)
The version of git installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50349 advisory. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides...
CVE-2024-52006 affecting package git for versions less than 2.40.4-1
CVE-2024-52006 affecting package git for versions less than 2.40.4-1. An upgraded version of the package is available that resolves this issue...
CVE-2024-50349 affecting package git for versions less than 2.40.4-1
CVE-2024-50349 affecting package git for versions less than 2.40.4-1. An upgraded version of the package is available that resolves this issue...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-1121)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2025-0016)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
VulnCheck KEV: CVE-2023-26134
Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo fails to sanitize its parameter commit, which later flows into a sensitive command execution API. As a result, attackers may inject malicious commands once...
RHEL 8 : grafana (RHSA-2025:0401)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:0401 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: go-git: argume...
EulerOS 2.0 SP8 : git (EulerOS-SA-2025-1121)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be...
MGASA-2025-0016 Updated git packages fix security vulnerabilities
Git does not sanitize URLs when asking for credentials interactively. CVE-2024-50349 Newline confusion in credential helpers can lead to credential exfiltration in git. CVE-2024-52006...
Updated git packages fix security vulnerabilities
Git does not sanitize URLs when asking for credentials interactively. CVE-2024-50349 Newline confusion in credential helpers can lead to credential exfiltration in git. CVE-2024-52006...
UBUNTU-CVE-2025-22620
gitoxide is an implementation of git written in Rust. Prior to 0.17.0, gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask will restrict them appropriately. But one of the strategies it uses to set permissions is not subject to the umask. Thi...
Security update for amazon-ssm-agent
This update for amazon-ssm-agent fixes the following issues: Update to version 3.3.1611.0: CVE-2025-21613: Fixed argument injection via the URL field in github.com/go-git/go-git/v5 bsc1235575 Full changelog: https://github.com/aws/amazon-ssm-agent/compare/3.1.1260.0...3.3.1611.0 Patch Instruction...
go-git: argument injection via the URL field
An argument injection vulnerability was found in go-git. This flaw allows an attacker to set arbitrary values to git-upload-pack flags, leading to command or code execution, exposure of sensitive data, or other unintended behavior. This is only possible in configurations where the file transport...