AlmaLinux 9.6 [TuxCare] Security Update: cargo / clippy / rust / rust-analyzer / rust-debugger-common / etc (ALMALINUX9.6:CLSA-2026:1790157025)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790157025 advisory. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git...

Rocky Linux 9.6 [TuxCare] Security Update: cargo / clippy / rust / rust-analyzer / rust-debugger-common / etc (ALMALINUX9.6:CLSA-2026:1790157025)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790157025 advisory. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git...

Amazon Linux 2023 : network-flow-monitor-agent (ALAS2023-2026-3116)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3116 advisory. libgit2 version 1.9.4 and below is vulnerable to a heap out-of-bounds read in setdata in src/libgit2/transports/smartpkt.c. The vulnerable code uses a fixed-size strncmp smartpkt.c:239 against the...

libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server

A flaw was found in libgit2. A fixed-size string comparison in the setdata function within transports/smartpkt.c does not adequately verify the size of a network packet buffer. A remote attacker, operating a malicious Git server, can send a specially crafted packet-line capability buffer. This ca...

libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server

A flaw was found in libgit2. A fixed-size string comparison in the setdata function within transports/smartpkt.c does not adequately verify the size of a network packet buffer. A remote attacker, operating a malicious Git server, can send a specially crafted packet-line capability buffer. This ca...

libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server

A flaw was found in libgit2. A fixed-size string comparison in the setdata function within transports/smartpkt.c does not adequately verify the size of a network packet buffer. A remote attacker, operating a malicious Git server, can send a specially crafted packet-line capability buffer. This ca...

The vulnerability of the set_data() function in the src/libgit2/transports/smart_pkt.c file, which implements Git methods in the C language, allows a hacker to cause a service failure.

The vulnerability of the setdata function in the src/libgit2/transports/smartpkt.c file, which implements Git methods in C language, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-53587

A flaw was found in libgit2. A fixed-size string comparison in the setdata function within transports/smartpkt.c does not adequately verify the size of a network packet buffer. A remote attacker, operating a malicious Git server, can send a specially crafted packet-line capability buffer. This ca...

CVE-2026-53587

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...

CVE-2026-53587 libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...

CVE-2026-53587: Improper Input Validation

libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...

CVE-2026-32696

CVE-2026-32696 affects NanoMQ 0.24.6 where HTTP auth (auth.http_auth) with MQTT CONNECT and missing username/password (using %u/%P) causes auth_http.c:set_data() to call strlen() on a NULL pointer, triggering a remote SIGSEGV and DoS. A fix exists in 0.24.7. The Red Hat, NVD, OSV, and CVE list en...

libgit2:download_refs_fuzzer: Heap-buffer-overflow in set_data

Project: https://github.com/libgit2/libgit2.git Detailed Report: https://oss-fuzz.com/testcase?key=4895812384325632 Project: libgit2 Fuzzing Engine: afl Fuzz Target: downloadrefsfuzzer Job Type: aflasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x631000038a28...

OSV-2023-80 Heap-buffer-overflow in set_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56037 Crash type: Heap-buffer-overflow READ Crash state: setdata refpkt gitpktparseline...

libgit2:download_refs_fuzzer: Heap-buffer-overflow in set_data

Project: https://github.com/libgit2/libgit2.git Detailed Report: https://oss-fuzz.com/testcase?key=5606242883338240 Project: libgit2 Fuzzing Engine: honggfuzz Fuzz Target: downloadrefsfuzzer Job Type: honggfuzzasanlibgit2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...