Remote Code Execution (RCE)

Golang is vulnerable to remote code execution. When executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly, it is only vulnerable in GOPATH mode, but not in module mode the distinction is documented at...

Security update for git (important)

openSUSE Security Update: Security update for git Announcement ID: openSUSE-SU-2021:0405-1 Rating: important References: 1183026 Cross-References: CVE-2021-21300 CVSS scores: CVE-2021-21300 SUSE: 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.2 An update that...

CVE-2021-28373

The authinternal plugin in Tiny Tiny RSS aka tt-rss before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch for a short time. However, all end users are explicitly directed to use the git master branch in...

CVE-2021-28373

The authinternal plugin in Tiny Tiny RSS aka tt-rss before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch for a short time. However, all end users are explicitly directed to use the git master branch in...

[ASA-202103-3] git: arbitrary code execution

Arch Linux Security Advisory ASA-202103-3 ========================================= Severity: Low Date : 2021-03-13 CVE-ID : CVE-2021-21300 Package : git Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1665 Summary ======= The package git before version...

[slackware-security] git

New git packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/git-2.17.6-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: On case-insensitive file systems with support...

Fedora 33 : git (2021-63fcbd126e)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-63fcbd126e advisory. - Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links...

Important Photon OS Security Update - PHSA-2021-4.0-0004

Updates of 'git' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0004

Updates of 'git' packages of Photon OS have been released...

Slackware 14.0 / 14.1 / 14.2 / current : git (SSA:2021-070-01)

New git packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2021-070-01. The text itself is copyright C Slackware Linux,...

Fedora: Security Advisory for git (FEDORA-2021-63fcbd126e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: git-2.30.2-1.fc33

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0369

An update of 'git' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2021-0327

Updates of 'python3', 'git' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0327

An update of 'python3', 'git' packages of Photon OS has been released...

Git for Visual Studio远程执行代码漏洞（CVE-2021-21300）

...

Bamboo for Windows uses a version of Git LFS vulnerable to remote code execution (CVE-2021-21237)

Git LFS is vulnerable to remote code execution on Windows CVE-2021-21237: On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix...

Bamboo for Windows uses a version of Git LFS vulnerable to remote code execution (CVE-2021-21237)

Git LFS is vulnerable to remote code execution on Windows CVE-2021-21237: On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix...

Remote Code Execution (RCE)

git is vulnerable to Remote Code Execution RCE. Cloning a specially crafted repository which contains symbolic links as well as a clean/smudge filter such as Git LFS may cause just-checked out scripts to be executed onto a case-insensitive file system...

CVE-2021-21300

A flaw was found in git, in which a specially-crafted repository that contains a symbolic link may cause just-checked out script to be executed while cloning. Mitigation If symbolic link support is disabled in Git e.g. via git config --global core.symlinks false, the described attack wont work...