10959 matches found
Fedora 40 : composer (2024-9ed24c98cd)
The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-9ed24c98cd advisory. Version 2.7.7 2024-06-10 Security: Fixed command injection via malicious git branch name GHSA-47f6-5gq3-vx9c / CVE-2024-35241 Security: Fixed multip...
Ubuntu: Security Advisory (USN-6793-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6793-2 git vulnerability
USN-6793-1 fixed vulnerabilities in Git. The CVE-2024-32002 was pending further investigation. This update fixes the problem. Original advisory details: It was discovered that Git incorrectly handled certain submodules. An attacker could possibly use this issue to execute arbitrary code. This iss...
USN-6793-2: Git vulnerability
USN-6793-1 fixed vulnerabilities in Git. The CVE-2024-32002 was pending further investigation. This update fixes the problem. Original advisory details: It was discovered that Git incorrectly handled certain submodules. An attacker could possibly use this issue to execute arbitrary code. This iss...
CVE-2024-37904
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on lines L55-L89. The Git provider...
CVE-2024-37904
CVE-2024-37904 affects Minder’s Git provider, which can be DoS’d by cloning a large or malicious repository into memory via go-git/go-git/v5. The root cause is that user-controlled Git URLs are cloned without a repository size limit and the entire repo is loaded into memory, enabling memory exhau...
CVE-2024-37904 Denial of service from maliciously configured Git repository in Minder
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on lines L55-L89. The Git provider...
CVE-2024-37904 Denial of service from maliciously configured Git repository in Minder
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on lines L55-L89. The Git provider...
CVE-2024-37904 Denial of service from maliciously configured Git repository in Minder
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on lines L55-L89. The Git provider...
GHSA-HPCG-XJQ5-G666 Minder affected by denial of service from maliciously configured Git repository
Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the github.com/go-git/go-git/v5 library on these lines:...
Minder Security Vulnerability
Minder is an open source platform that helps development teams and the open source community build more secure software and prove to others that the software they build is secure. A security vulnerability exists in versions prior to Minder v0.0.52 that stems from a maliciously configured Git...
OPENSUSE-SU-2024:13071-1 ctdb-4.18.5+git.313.c8e274c7852-1.1 on GA media
These are all security issues fixed in the ctdb-4.18.5+git.313.c8e274c7852-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12003-1 git-2.35.3-1.1 on GA media
These are all security issues fixed in the git-2.35.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11937-1 git-delta-0.12.1-1.1 on GA media
These are all security issues fixed in the git-delta-0.12.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10786-1 git-2.33.0-1.3 on GA media
These are all security issues fixed in the git-2.33.0-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12487-1 git-2.38.1-1.1 on GA media
These are all security issues fixed in the git-2.38.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12223-1 git-annex-10.20220624-1.1 on GA media
These are all security issues fixed in the git-annex-10.20220624-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12952-1 hawk2-2.6.4+git.1682509819.1ff135ea-1.1 on GA media
These are all security issues fixed in the hawk2-2.6.4+git.1682509819.1ff135ea-1.1 package on the GA media of openSUSE Tumbleweed...