11431 matches found
Fedora 31 : git (2020-cdef88bb89)
Security fix for CVE-2020-5260 From the upstream release notes : With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value pass...
Fedora: Security Advisory for git (FEDORA-2020-cdef88bb89)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security fix for the ALT Linux 10 package git version 2.25.4-alt1
April 19, 2020 Dmitry V. Levin 2.25.4-alt1 - 2.25.3 - 2.25.4 fixes: CVE-2020-11008...
[SECURITY] Fedora 31 Update: git-2.25.3-1.fc31
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...
Malicious Package
Overview git-teamstats is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using git-teamstats...
openSUSE: Security Advisory for git (openSUSE-SU-2020:0524-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Amazon Linux AMI : git (ALAS-2020-1357)
The version of git installed on the remote host is prior to 2.14.6-1.62. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1357 advisory. With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a...
MGASA-2020-0175 Updated git packages fix security vulnerability
With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value passed via the credential protocol CVE-2020-5260...
Updated git packages fix security vulnerability
With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host. The attack has been made impossible by forbidding a newline character in any value passed via the credential protocol CVE-2020-5260...
Exploit for Insufficiently Protected Credentials in Git
CVE-2020-5260 CVE-2020-5260 Demonstration Record When exe...
OPENSUSE-SU-2020:0524-1 Security update for git
This update for git fixes the following issues: - CVE-2020-5260: With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a wrong host bsc1168930. This update was imported from the SUSE:SLE-15:Update update project...
About the security content of Xcode 11.4.1 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Debian DLA-2177-1 : git security update
Felix Wilhelm of Google Project Zero discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline, the credential helper machinery can be fooled to return credential information for a wrong host. For Debian 8 'Jessie', this problem ha...
Debian: Security Advisory (DLA-2177-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for git (important)
openSUSE Security Update: Security update for git Announcement ID: openSUSE-SU-2020:0524-1 Rating: important References: 1168930 Cross-References: CVE-2020-5260 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for git fixes th...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2020-1386)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : git (ALAS-2020-1409)
The version of git installed on the remote host is prior to 2.23.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1409 advisory. With a crafted URL that contains a newline in it, the credential helper machinery can be fooled to give credential information for a...
[SECURITY] [DLA 2177-1] git security update
Package : git Version : 1:2.1.4-2.1+deb8u9 CVE ID : CVE-2020-5260 Felix Wilhelm of Google Project Zero discovered a flaw in git, a fast, scalable, distributed revision control system. With a crafted URL that contains a newline, the credential helper machinery can be fooled to return credential...
Exploit for Insufficiently Protected Credentials in Git
cve-2020-5260 A HTTP PoC Endpoint for cve-2020-5260 which can...
CVE-2020-5260
A flaw was found in git. Credentials can be leaked through the use of a crafted URL that contains a newline, fooling the credential helper to give information for a different host. Highest threat from the vulnerability is to data confidentiality. Mitigation The most complete workaround is to...