ALSA-2024:2724 Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS CVE-2023-45288...

RHEL 9 : git-lfs (RHSA-2024:2724)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:2724 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while...

Important: Red Hat Security Advisory: git-lfs security update

An update for git-lfs is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS...

ALSA-2024:2699 Important: git-lfs security update

Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS...

RHEL 8 : git-lfs (RHSA-2024:2699)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:2699 advisory. Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing th...

CLSA-2024-1714728645 git: Fix of CVE-2023-23946

CVE-2023-23946: apply - fix writing behind newly created symbolic links...

CVE-2024-34146

A flaw was found in the Jenkins Git server Plugin, involving inadequate permission validation for reading Git repositories over SSH. Through the manipulation of crafted requests, a malicious actor can attain unauthorized read access to a Git repository over SSH. Subsequently, they could utilize...

org.jenkins-ci.plugins:scriptler (>=2.5.1, <=2.6.1) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.1)

org.jenkins-ci.plugins:git-server MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins:scriptler =2.5.1, =2.6.1 Source cves: CVE-2024-34146 Source advisory:...

GHSA-XH9C-VCF9-H94M Jenkins Git server Plugin does not perform a permission check

Jenkins Git server Plugin 114.v068ac7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH. This allows attackers with a previously configured SSH public key but lacking Overall/Read permission to access Git repositories. Git server Plugin...

Jenkins Git server Plugin does not perform a permission check

Jenkins Git server Plugin 114.v068ac7cc2574 and earlier does not perform a permission check for read access to a Git repository over SSH. This allows attackers with a previously configured SSH public key but lacking Overall/Read permission to access Git repositories. Git server Plugin...

org.biouno:uno-choice (>=1.5-alpha-1, <=1.5.3), org.jenkins-ci.plugins:scriptler (2.9) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.6)

org.jenkins-ci.plugins:git-server MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.biouno:uno-choice =1.5-alpha-1, =1.5.3 - org.jenkins-ci.plugins:scriptler 2.9 Source cves:...

org.biouno:uno-choice (>=1.0, <=1.4), org.jenkins-ci.plugins:scriptler (2.7) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.3)

org.jenkins-ci.plugins:git-server MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.biouno:uno-choice =1.0, =1.4 - org.jenkins-ci.plugins:scriptler 2.7 Source cves:...

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.8, <=2.9), org.waveywaves.jenkins.plugins:tekton-client (1.1.0) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.7)

org.jenkins-ci.plugins:git-server MAVEN version 1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps-global-lib =2.8, =2.9 -...

org.jenkins-ci.plugins:templating-engine (>=2.3, <=2.5.3) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.9)

org.jenkins-ci.plugins:git-server MAVEN version 1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins:templating-engine =2.3, =2.5.3 Source cves: CVE-2024-34146 Source...

org.jenkins-ci.plugins.workflow:workflow-aggregator (>=0.1-beta-5, <=0.1-beta-7), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=0.1-beta-5, <=0.1-beta-7) +1 more potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.4)

org.jenkins-ci.plugins:git-server MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator =0.1-beta-5, =0.1-beta-5, =0.1-beta-7 -...

org.jenkins-ci.plugins:git-usercontent (>=1.0, <=1.3) potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.0)

org.jenkins-ci.plugins:git-server MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - org.jenkins-ci.plugins:git-usercontent =1.0, =1.3 Source cves: CVE-2024-34146 Source advisory:...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2024-34145 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2024-34145 Source...

de.wellnerbou.jenkins:git-changelog (>=3.0, <=3.31) potentially affected by CVE-2024-34144 via org.jenkins-ci.plugins:script-security (1.46)

org.jenkins-ci.plugins:script-security MAVEN version 1.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - de.wellnerbou.jenkins:git-changelog =3.0, =3.31 Source cves: CVE-2024-34144 Source...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6) +37 more potentially affected by CVE-2024-34146 via org.jenkins-ci.plugins:git-server (1.5)

org.jenkins-ci.plugins:git-server MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta, =1.3.0, =1.0.0-b15, =1.0.0-rc2, =1.0.0-rc2,...