CVE catalog

CVE-2005-4900

libgit2-1_1-1.1.1-1.2 on GA media

Severity: Medium · CVSS 5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Published: Jun 15, 2024, 12:00:00 AM UTC
Updated: Feb 4, 2026, 4:13:03 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.93% · Oct 25, 2026

These are all security issues fixed in the libsha1detectcoll-devel-1.0.3-4.12 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Opensuse	sha1collisiondetection	tumbleweed	`1.0.3-4.12`	fixed
Opensuse	git	tumbleweed	`2.33.0-1.3`	fixed
Opensuse	libgit2	tumbleweed	`1.1.1-1.2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Opensuse	sha1collisiondetection	rpm	tumbleweed	`1.0.3-4.12`	Not reported	OPENSUSE-SU-2024:11377-1	Not reported
Opensuse	git	rpm	tumbleweed	`2.33.0-1.3`	Not reported	OPENSUSE-SU-2024:10786-1	Not reported
Opensuse	libgit2	rpm	tumbleweed	`1.1.1-1.2`	Not reported	OPENSUSE-SU-2024:10943-1	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[openSUSE Tumbleweed]

[git]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Fixed · Fixed: 2.33.0-1.3
  pypi · git · opensuse · tumbleweed
[git-arch]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-core]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-credential-libsecret]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-cvs]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-daemon]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-doc]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · noarch · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-email]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-gui]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[gitk]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-p4]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-svn]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[git-web]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[libgit2-1_9]Unknown
Source package: [libgit2]
Details (1)
- 1.9.7-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.1.1-1.2
  Version impact unknown
  pypi · libgit2 · opensuse · tumbleweed
[libgit2-devel]Unknown
Source package: [libgit2]
Details (1)
- 1.9.7-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.1.1-1.2
  Version impact unknown
  pypi · libgit2 · opensuse · tumbleweed
[libgit2-tools]Unknown
Source package: [libgit2]
Details (1)
- 1.9.7-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 1.1.1-1.2
  Version impact unknown
  pypi · libgit2 · opensuse · tumbleweed
[libsha1detectcoll1]Unknown
Source package: [sha1collisiondetection]
Details (1)
- 1.0.3-5.7 · x86_64 · tumbleweed
  Unknown · Fixed: 1.0.3-4.12
  Version impact unknown
  pypi · sha1collisiondetection · opensuse · tumbleweed
[libsha1detectcoll-devel]Unknown
Source package: [sha1collisiondetection]
Details (1)
- 1.0.3-5.7 · x86_64 · tumbleweed
  Unknown · Fixed: 1.0.3-4.12
  Version impact unknown
  pypi · sha1collisiondetection · opensuse · tumbleweed
[perl-Git]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.33.0-1.3
  Version impact unknown
  pypi · git · opensuse · tumbleweed
[sha1collisiondetection]Unknown
Source package: [sha1collisiondetection]
Details (1)
- 1.0.3-5.7 · x86_64 · tumbleweed
  Fixed · Fixed: 1.0.3-4.12
  pypi · sha1collisiondetection · opensuse · tumbleweed

Observed: Oct 27, 2026, 3:31:50 AM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]