846 matches found
Gitmails
Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...
CLEANSTART-2024-CX93954 git_oid_nfmt function in commit
Security vulnerability affects the libgit2 package. The gitoidnfmt function in commit...
CLEANSTART-2024-EA74509 http_connect function in transports/http
Security vulnerability affects the libgit2 package. The httpconnect function in transports/http...
CLEANSTART-2024-VF16442 flaw was found in libgit2 before version 0
Security vulnerability affects the libgit2 package. A flaw was found in libgit2 before version 0...
CLEANSTART-2024-CI59854 issue was found in Git before v2
Security vulnerability affects the libgit2 package. An issue was found in Git before v2...
CLEANSTART-2024-RL76221 remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'
Security vulnerability affects the libgit2 package. A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'...
CLEANSTART-2024-YS57299 issue was found in Git before v2
Security vulnerability affects the libgit2 package. An issue was found in Git before v2...
MGASA-2026-0570 Updated libgit2 package fixes security vulnerabilities
Inverted IP SubjectAltName Comparison in OpenSSL Backend. CVE-2026-53583 Submodule path traversal. CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header. CVE-2026-53585 HTTP transport can leak credentials to an offsite redirect target. CVE-2026-53586 Unauthenticated...
Updated libgit2 package fixes security vulnerabilities
Inverted IP SubjectAltName Comparison in OpenSSL Backend. CVE-2026-53583 Submodule path traversal. CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header. CVE-2026-53585 HTTP transport can leak credentials to an offsite redirect target. CVE-2026-53586 Unauthenticated...
OESA-2026-4622 libgit2 security update
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language which supports C bindings. Security Fixes: libgit2 versions before 1.8.7 and 1.9.0 before 1.9...
OESA-2026-4623 libgit2 security update
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language which supports C bindings. Security Fixes: libgit2 versions before 1.8.7 and 1.9.0 before 1.9...
OESA-2026-4621 libgit2 security update
libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language which supports C bindings. Security Fixes: libgit2 versions before 1.8.7 and 1.9.0 before 1.9...
Debian dla-4831 : libgit2-1.5 - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4831 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4831-1 [email protected]...
Astra Linux – vulnerability in libgit2
An issue was found in libgit2 prior to version 0.28.4 and in versions 0.9x prior to 0.99.0. path.c mishandles equivalent filenames that exist due to NTFS Alternate Data Streams. This may enable remote code execution when cloning a repository. This issue is similar to CVE-2019-1352...
Astra Linux – Vulnerability in libgit2
libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Previous versions of libgit2 required the caller to set the certificatecheck field of the libgit2’s...
Ubuntu 24.04 LTS / 26.04 LTS : libgit2 vulnerability (USN-8907-1)
The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8907-1 advisory. It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a...
Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libgit2 vulnerabilities (USN-8628-1)
The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8628-1 advisory. It was discovered that libgit2 incorrectly handled the Git Smart Protocol. A remote attacker...
[SECURITY] [DLA 4831-1] libgit2 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4831-1 [email protected] https://www.debian.org/lts/security/ Simon Quigley October 12, 2026 https://wiki.debian.org/LTS -...
USN-8907-1: libgit2 vulnerability
It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate could possibly use this issue to perform a machine-in-the-middle attack, leading to the exposure of sensitive information...
USN-8907-1 libgit2 vulnerability
It was discovered that libgit2 incorrectly handled IP address SubjectAltName verification in TLS certificate validation. A remote attacker with a CA-trusted certificate could possibly use this issue to perform a machine-in-the-middle attack, leading to the exposure of sensitive information...