10963 matches found
git: insecure hardlinks
A vulnerability was found in Git. This flaw allows an unauthenticated attacker to place a specialized repository on their target's local system. For performance reasons, Git uses hardlinks when cloning a repository located on the same disk. However, if the repo being cloned is owned by a differen...
Important: Red Hat Security Advisory: git security update
An update for git is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
git: RCE while cloning local repos
A vulnerability was found in Git. This vulnerability can be exploited by an unauthenticated attacker who places a specialized repository on the target's local system. If the victim clones this repository, the attacker can execute arbitrary code...
HashiCorp go-getter Vulnerable to Code Execution On Git Update Via Git Config Manipulation
Summary HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configuration, potentially leading to arbitrary code execution. This vulnerability, CVE-2024-6257, was fixed in go-getter 1.7.5. Background HashiCorp’s go-getter is a library for...
ALSA-2024:4084 Important: git security update
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...
git security update
2.43.5-1 - Update to 2.43.5 - Related: RHEL-36399, RHEL-36411 2.43.4-1 - Update to 2.43.4 - Resolves: RHEL-36399, RHEL-36411...
git security update
2.43.5-1 - Update to 2.43.5 - Related: RHEL-36402, RHEL-36414 2.43.4-1 - Update to 2.43.4 - Resolves: RHEL-36402, RHEL-36414...
PT-2024-5875 · Hashicorp +2 · Go-Getter +2
Name of the Vulnerable Software and Affected Versions: HashiCorp’s go-getter library affected versions not specified Description: The issue is related to the go-getter library's handling of Git updates on existing maliciously modified Git configurations, potentially leading to arbitrary code...
RHEL 8 : git (RHSA-2024:4084)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4084 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...
RHEL 9 : git (RHSA-2024:4083)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4083 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a...
AlmaLinux 8 : git (ALSA-2024:4084)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4084 advisory. git: Recursive clones RCE CVE-2024-32002 git: RCE while cloning local repos CVE-2024-32004 git: additional local RCE CVE-2024-32465 git: insecure hardlink...
Important: git security update
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...
HashiCorp go-getter security vulnerability
HashiCorp go-getter is a library for Go golang from HashiCorp, USA, for downloading files or directories from various sources using URLs as the primary form of input. A security vulnerability exists in HashiCorp go-getter version 1.7.4 and earlier, which stems from the possibility of being forced...
Oracle Linux 9 : git (ELSA-2024-4083)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4083 advisory. 2.43.5-1 - Update to 2.43.5 - Related: RHEL-36402, RHEL-36414 2.43.4-1 - Update to 2.43.4 - Resolves: RHEL-36402, RHEL-36414 Tenable has extracted the...
AlmaLinux 9 : git (ALSA-2024:4083)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:4083 advisory. git: Recursive clones RCE CVE-2024-32002 git: RCE while cloning local repos CVE-2024-32004 git: additional local RCE CVE-2024-32465 git: insecure hardlink...
Oracle Linux 8 : git (ELSA-2024-4084)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-4084 advisory. 2.43.5-1 - Update to 2.43.5 - Related: RHEL-36399, RHEL-36411 2.43.4-1 - Update to 2.43.4 - Resolves: RHEL-36399, RHEL-36411 Tenable has extracted the...
ALSA-2024:4083 Important: git security update
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...
Important: git security update
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to wo...
[SECURITY] [DSA 5715-2] composer regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-5715-2 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 24, 2024 https://www.debian.org/security/faq -...
