32 matches found
Fedora: Security Advisory for rust-libgit2-sys (FEDORA-2023-db96a62414)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for rust-libgit2-sys (FEDORA-2023-055b389109)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: rust-libgit2-sys-0.13.5-1.fc37
Native bindings to the libgit2 library...
Fedora 36 : rust-libgit2-sys (2023-055b389109)
The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-055b389109 advisory. Update to version 0.13.5 includes bundled libgit2 v1.4.5 with the latest security fixes. Tenable has extracted the preceding description block directly from...
GHSA-M4CH-RFV5-X5G3 git2-rs fails to verify SSH keys by default
The git2 and libgit2-sys crates are Rust wrappers around the libgit2 C library. It was discovered that libgit2 1.5.0 and below did not verify SSH host keys when establishing an SSH connection, exposing users of the library to Man-In-the-Middle attacks. The libgit2 team assigned CVE-2023-22742 to...
git2-rs fails to verify SSH keys by default
The git2 and libgit2-sys crates are Rust wrappers around the libgit2 C library. It was discovered that libgit2 1.5.0 and below did not verify SSH host keys when establishing an SSH connection, exposing users of the library to Man-In-the-Middle attacks. The libgit2 team assigned CVE-2023-22742 to...
abacuz (0.1.1), addupstream (0.2.4) +800 more potentially affected by CVE-2023-22742 via libgit2-sys (>=0.1.13, <=0.13.2+1.4.2)
libgit2-sys CARGO version =0.1.13, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =3.1.3, =3.10.0 - asmuthbloomsecretsharing 0.2.2 - assemble 0.1.2 and more Source cves: CVE-2023-22742 Source advisory: OSV:GHSA-M4CH-RFV5-X5G3...
cargo-crates (>=0.1.0, <=0.1.5), cargo-index-transit (0.1.1) +6 more potentially affected by CVE-2023-22742 via libgit2-sys (0.14.1+1.5.0)
libgit2-sys CARGO version 0.14.1+1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on libgit2-sys and may be impacted: - cargo-crates =0.1.0, =0.1.0, =2.1.8, =2.7.0, =0.6.0, =0.6.2 Source cves: CVE-2023-22742 Source advisory: OSV:GHSA-M4CH-RFV5-X5G3...
git2 does not verify SSH keys by default
The git2 and libgit2-sys crates are Rust wrappers around the libgit2 C library. It was discovered that libgit2 1.5.0 and below did not verify SSH host keys when establishing an SSH connection, exposing users of the library to Man-In-the-Middle attacks. The libgit2 team assigned...
cargo-crates (>=0.1.0, <=0.1.5), cargo-index-transit (0.1.1) +6 more potentially affected by CVE-2023-22742 via libgit2-sys (0.14.1+1.5.0)
libgit2-sys CARGO version 0.14.1+1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on libgit2-sys and may be impacted: - cargo-crates =0.1.0, =0.1.0, =2.1.8, =2.7.0, =0.6.0, =0.6.2 Source cves: CVE-2023-22742 Source advisory: OSV:RUSTSEC-2023-0003...
abacuz (0.1.1), addupstream (0.2.4) +800 more potentially affected by CVE-2023-22742 via libgit2-sys (>=0.1.13, <=0.13.2+1.4.2)
libgit2-sys CARGO version =0.1.13, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =3.1.3, =3.10.0 - asmuthbloomsecretsharing 0.2.2 - assemble 0.1.2 and more Source cves: CVE-2023-22742 Source advisory: OSV:RUSTSEC-2023-0003...
RUSTSEC-2023-0003 git2 does not verify SSH keys by default
The git2 and libgit2-sys crates are Rust wrappers around the libgit2 C library. It was discovered that libgit2 1.5.0 and below did not verify SSH host keys when establishing an SSH connection, exposing users of the library to Man-In-the-Middle attacks. The libgit2 team assigned...