SUSE SLES15: git / git-arch / git-core / git-cvs / git-daemon / git-doc / etc (SUSE-SU-2023:0108-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0108-1 advisory. - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an...

Fedora 36 : git (2023-746c4aacce)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-746c4aacce advisory. Update to 2.39.1 CVE-2022-41903, CVE-2022-23521 Refer to the upstream release notes and the security advisories CVE-2022-41903, CVE-2022-23521 for...

SUSE SLES12: git / git-arch / git-core / git-cvs / git-daemon / git-doc / etc (SUSE-SU-2023:0109-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0109-1 advisory. - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an...

Fedora 37 : git (2023-9718cc6113)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9718cc6113 advisory. Update to 2.39.1 CVE-2022-41903, CVE-2022-23521 Refer to the upstream release notes and the security advisories CVE-2022-41903, CVE-2022-23521 for...

SUSE SLED15: git / git-arch / git-core / git-credential-gnome-keyring / etc (SUSE-SU-2023:0110-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0110-1 advisory. - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands...

FreeBSD : shells/fish -- arbitrary code execution via git (a3b10c9b-99d9-11ed-aa55-d05099fed512)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a3b10c9b-99d9-11ed-aa55-d05099fed512 advisory. - fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary cod...

abacuz (0.1.1), addupstream (0.2.4) +801 more potentially affected by CVE-2023-22742 via libgit2-sys (>=0.1.13, <=0.13.2+1.4.2)

libgit2-sys CARGO version =0.1.13, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =3.1.3, =3.10.0 - asmuthbloomsecretsharing 0.2.2 - assemble 0.1.2 and more Source cves: CVE-2023-22742 Source advisory: OSV:GHSA-M4CH-RFV5-X5G3...

CVE-2023-22742

CVE-2023-22742 affects libgit2 when using SSH with the optional libssh2 backend. The issue is that certificate checking is not performed by default unless a certificate_check callback is explicitly configured in git_remote_callbacks, enabling potential MITM if server SSH keys are not validated. T...

Remote Code Execution(RCE)

git is vulnerable to Remote Code ExecutionRCE. When parsing gitattributes, multiple integer overflows may occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge, causing overflows to be triggered via a...

SUSE-SU-2023:0110-1 Security update for git

This update for git fixes the following issues: - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an integer overflow that could be triggered when parsing a gitattributes file bsc1207032...

SUSE-SU-2023:0109-1 Security update for git

This update for git fixes the following issues: - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an integer overflow that could be triggered when parsing a gitattributes file bsc1207032...

SUSE-SU-2023:0108-1 Security update for git

This update for git fixes the following issues: - CVE-2022-41903: Fixed a heap overflow in the 'git archive' and 'git log --format' commands bsc1207033. - CVE-2022-23521: Fixed an integer overflow that could be triggered when parsing a gitattributes file bsc1207032...

Ubuntu: Security Advisory (USN-5810-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 10 package git version 2.33.6-alt1

2.33.6-alt1 built Jan. 20, 2023 Dmitry V. Levin in task 313612 Dec. 13, 2022 Dmitry V. Levin - 2.33.5 - 2.33.6 fixes: CVE-2022-41903, CVE-2022-23521...

USN-5810-2: Git regression

USN-5810-1 fixed vulnerabilities in Git. This update introduced a regression as it was missing some commit lines. This update fixes the problem. Original advisory details: Markus Vervier and Eric Sesterhenn discovered that Git incorrectly handled certain gitattributes. An attacker could possibly...

USN-5810-2 git regression

USN-5810-1 fixed vulnerabilities in Git. This update introduced a regression as it was missing some commit lines. This update fixes the problem. Original advisory details: Markus Vervier and Eric Sesterhenn discovered that Git incorrectly handled certain gitattributes. An attacker could possibly...

Update now! Two critical flaws in Git's code found, patched

In a sponsored security source code audit, security experts from X41 D-SEC GmbH Eric Sesterhenn and Markus Vervier and GitLab Joern Schneeweisz found two notable critical flaws in Git's code. A vulnerability on Git could generally compromise source code repositories and developer systems, but...

Ubuntu 18.04 LTS / 20.04 LTS : Git regression (USN-5810-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5810-2 advisory. USN-5810-1 fixed vulnerabilities in Git. This update introduced a regression as it was missing some commit lines. This update fixes the problem. Tenab...

Integer Overflow

git is vulnerable to integer overflows. When processing the padding operators, there is a integer overflow in pretty.c::formatandpadcommit where a sizet is stored improperly as an int, and then added as an offset to a memcpy. This overflow can be triggered directly by a user running a command whi...

CVE-2022-23521

A flaw was found in Git, a distributed revision control system. When parsing gitattributes, a mechanism to allow defining attributes for paths, multiple integer overflows can occur when there is a huge number of path patterns, attributes for a single pattern, or declared attribute names. These...