CentOS Linux 7 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-bzr / git-cvs / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1712672592)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1712672592 advisory. - gitconnectgit in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpecte...

The vulnerability of the git_connect_git function in the connect.c component of the distributed version control system Git allows a attacker to access confidential data.

The vulnerability of the gitconnectgit function in the connect.c component of a distributed version control system is related to the lack of security measures for the web page structure. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

CVE-2021-40330: Undefined Security Weakness

gitconnectgit in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring...