Security fix for the ALT Linux 10 package git version 2.33.4-alt1

June 23, 2022 Dmitry V. Levin 2.33.4-alt1 - 2.33.3 - 2.33.4 fixes: CVE-2022-29187...

Red Hat OpenShift 资源管理错误漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying, and running applications. Red Hat OpenShift GitOps 1.5 suffers from a resource management error vulnerability that stems from vulnerability to uncontrolled...

EulerOS 2.0 SP8 : git (EulerOS-SA-2022-1929)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...

Red Hat OpenShift 后置链接漏洞

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift GitOps 1.5 that stems from vulnerability to symbolic links, which can be exploite...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-1929)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in com.unity.git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed428cb13166bfbc31992104bb11a78cd854b29fc1a99132fdf18b346563c617 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.git.api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ed2760b4ec200a5403c5cdc919864744dd932e59f73c2a36e22bb5c4f99462a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.git.ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4db1eaca0dc0d3787573bd0324fbd4be1d35969df24ad4ccd257f1e20804a561 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-en-boite-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a28164e7297d1f76fb0f0a2321f9be542603117591c9d910bd5edb6b7add66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-en-boite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f46bbf079b977deefeb78d8bf3c63587df8e512096be79aa8e7decc4c95083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3368 Malicious code in git-en-boite-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f46bbf079b977deefeb78d8bf3c63587df8e512096be79aa8e7decc4c95083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-dependency-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c9b4a87b0253efbaf0122b94b2b942adc6b9163f8161863bb0d334859bb9f87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3367 Malicious code in git-dependency-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c9b4a87b0253efbaf0122b94b2b942adc6b9163f8161863bb0d334859bb9f87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in git-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f08a6b8256f7c6e7f8805977bc211518eaed18aab87b09a573d517a26ae9856 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3370 Malicious code in git-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f08a6b8256f7c6e7f8805977bc211518eaed18aab87b09a573d517a26ae9856 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-25856

The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the g GitArtifactReader.Read API in git.go. This could allow arbitrary file reads if the GitArtifactReader is provided a pathname containing a symbolic link or an implicit directory...

Insecure path traversal in Git Trigger Source can lead to arbitrary file read

Impact A path traversal issue was found in the g GitArtifactReader.Read API. Read calls into g GitArtifactReader.readFromRepository that opens and reads the file that contains the trigger resource definition: go func g GitArtifactReader readFromRepositoryr git.Repository, dir string No checks are...

GHSA-QPGX-64H2-GC3C Insecure path traversal in Git Trigger Source can lead to arbitrary file read

Impact A path traversal issue was found in the g GitArtifactReader.Read API. Read calls into g GitArtifactReader.readFromRepository that opens and reads the file that contains the trigger resource definition: go func g GitArtifactReader readFromRepositoryr git.Repository, dir string No checks are...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-1888)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JVN#93667442: Gitlab vulnerable to server-side request forgery

Gitlab contains a server-side request forgery vulnerability CWE-918 through the Project Import feature. Impact The vulnerability allows an attacker to make arbitrary HTTP/HTTPS or git requests inside a GitLab instance's network. Solution Update the software Update the software to the latest versi...