USN-4329-1: Git vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description Felix Wilhelm discovered that Git incorrectly handled certain URLs that included newlines. A remote attacker could possibly use this issue to trick Git into returning credential...

Photon OS 1.0: Git PHSA-2020-1.0-0293

An update of the git package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0293. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136548;...

vulhub

This repository is an open-source collection of vulnerable web applications and environments for security testing and education, maintained by vulhub. It is a defensive blue-team research and threat mitigation tool. The repository contains a variety of vulnerable web applications and environments...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0293

An update of 'linux-esx', 'glibc', 'openldap', 'git', 'linux' packages of Photon OS has been released...

Oracle Linux 8 : git (ELSA-2020-1980)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1980 advisory. 2.18.4-2 - Update to release 2.18.4 - Resolves: CVE-2020-11008 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Arbitrary Command Execution

git is vulnerable to arbitrary command execution. The vulnerability exists as a "git submodule update" operation can run commands found in the .gitmodules file of a malicious repository...

Remote Code Execution (RCE)

git is vulnerable to a remote code execution vulnerability. It exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...

Missing NTFS Protection

Git is vulnerable to missing NTFS Protection. An flaw was found during running Git in the Windows Subsystem for Linux also known as "WSL" while accessing a working directory on a regular Windows drive. None of the NTFS protections were active...

Remote Code Execution (RCE)

Git is vulnerable to remote code execution vulnerability. It exists when Git for Visual Studio improperly sanitizes input...

Tampering Vulnerability

GIt is vulnerable to a tampering vulnerability. It exists when Git for Visual Studio improperly handles virtual drive paths...

Photon OS 1.0: Git PHSA-2020-1.0-0291

An update of the git package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0291. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136406;...

Important Photon OS Security Update - PHSA-2020-3.0-0086

Updates of 'git', 'util-linux' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-0086

Updates of 'util-linux', 'git' packages of Photon OS have been released...

git security update

2.18.4-2 - Update to release 2.18.4 - Resolves: CVE-2020-11008...

The vulnerability of the “credentialhelper” component in the distributed Git version control system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the “credentialhelper” component in the distributed Git version control system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information using a special...

The vulnerability of the “credentialhelper” component in the distributed Git version control system, related to insufficient protection of registration data, allows a malicious actor to access confidential information.

The vulnerability of the “credentialhelper” component in the distributed Git version control system is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information through ...

Amazon Linux 2 : git (ALAS-2020-1416)

The version of git installed on the remote host is prior to 2.23.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1416 advisory. Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an...

Important: git

Issue Overview: Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260GHSA-qm7j-c969-7j4q. The fix for that bug still left the door open for an exploit where some credentia...

Photon OS 2.0: Git PHSA-2020-2.0-0236

An update of the git package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0236. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid136328;...

FreeBSD : Gitlab -- Multiple Vulnerabilities (e8483115-8b8e-11ea-bdcf-001b217b3468)

Gitlab reports : Path Traversal in NuGet Package Registry Workhorse Bypass Leads to File Disclosure OAuth Application Client Secrets Revealed Code Owners Approval Rules Are Not Updated for Existing Merge Requests When Source Branch Changes Code Owners Protection Not Enforced from Web UI Repositor...