CVE catalog

CVE-2020-11008

git: CVE-2020-11008

Severity: High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published: Apr 20, 2020, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 3.87% · Oct 25, 2026

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that bug still left the door open for an exploit where _some_ credential is leaked (but the attacker cannot control which one). Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure storage provided by the operating system. Specially-crafted URLs that are considered illegal as of the recently published Git versions can cause Git to send a "blank" pattern to helpers, missing hostname and protocol fields. Many helpers will interpret this as matching _any_ URL, and will return some unspecified stored password, leaking the password to an attacker's server. The vulnerability can be triggered by feeding a malicious URL to `git clone`. However, the affected URLs look rather suspicious; the likely vector would be through systems which automatically clone URLs not visible to the user, such as Git submodules, or package systems built around Git. The root of the problem is in Git itself, which should not be feeding blank input to helpers. However, the ability to exploit the vulnerability in practice depends on which helpers are in use. Credential helpers which are known to trigger the vulnerability: - Git's "store" helper - Git's "cache" helper - the "osxkeychain" helper that ships in Git's "contrib" directory Credential helpers which are known to be safe even with vulnerable versions of Git: - Git Credential Manager for Windows Any helper not in this list should be assumed to trigger the vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	git	sid	`1:2.55.0-1`	fixed
Debian	git	forky	`1:2.53.0-1`	fixed
Debian	git	trixie	`1:2.47.3-0+deb13u1`	fixed
Debian	git	bookworm	`1:2.39.5-0+deb12u3`	fixed
Debian	git	bookworm-security	`1:2.39.5-0+deb12u2`	fixed
Alpine	git	3.10	`2.22.4-r0`	fixed
Alpine	git	3.11	`2.24.3-r0`	fixed
Alpine	git	3.12	`2.26.2-r0`	fixed
Alpine	git	3.13	`2.26.2-r0`	fixed
Alpine	git	3.14	`2.26.2-r0`	fixed
Alpine	git	3.15	`2.26.2-r0`	fixed
Alpine	git	3.16	`2.26.2-r0`	fixed
Alpine	git	3.17	`2.26.2-r0`	fixed
Alpine	git	3.18	`2.26.2-r0`	fixed
Alpine	git	3.19	`2.26.2-r0`	fixed
Alpine	git	3.20	`2.26.2-r0`	fixed
Alpine	git	3.21	`2.26.2-r0`	fixed
Alpine	git	3.22	`2.26.2-r0`	fixed
Alpine	git	3.23	`2.26.2-r0`	fixed
Alpine	git	3.24	`2.26.2-r0`	fixed
Alpine	git	3.8	`2.18.4-r0`	fixed
Alpine	git	3.9	`2.20.4-r0`	fixed
Ubuntu	git	16.04	`1:2.5.0-1`	vulnerable
Ubuntu	git	16.04	`1:2.6.2-1`	vulnerable
Ubuntu	git	16.04	`1:2.6.3-1`	vulnerable
Ubuntu	git	16.04	`1:2.6.4-1`	vulnerable
Ubuntu	git	16.04	`1:2.7.0~rc3-1`	vulnerable
Ubuntu	git	16.04	`1:2.7.0-1`	vulnerable
Ubuntu	git	16.04	`1:2.7.3-0ubuntu1`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.1`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.2`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.3`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.4`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.5`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.6`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.7`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.8`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.9`	fixed
Ubuntu	git	18.04	`1:2.14.1-1ubuntu4`	vulnerable
Ubuntu	git	18.04	`1:2.15.1-1ubuntu2`	vulnerable
Ubuntu	git	18.04	`1:2.17.0-1ubuntu1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.3`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.4`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.5`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.6`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.7`	fixed
Ubuntu	git	16.04	`1:2.5.0-1`	vulnerable
Ubuntu	git	16.04	`1:2.6.2-1`	vulnerable
Ubuntu	git	16.04	`1:2.6.3-1`	vulnerable
Ubuntu	git	16.04	`1:2.6.4-1`	vulnerable
Ubuntu	git	16.04	`1:2.7.0~rc3-1`	vulnerable
Ubuntu	git	16.04	`1:2.7.0-1`	vulnerable
Ubuntu	git	16.04	`1:2.7.3-0ubuntu1`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.1`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.2`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.3`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.4`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.5`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.6`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.7`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.8`	vulnerable
Ubuntu	git	16.04	`1:2.7.4-0ubuntu1.9`	fixed
Ubuntu	git	18.04	`1:2.14.1-1ubuntu4`	vulnerable
Ubuntu	git	18.04	`1:2.15.1-1ubuntu2`	vulnerable
Ubuntu	git	18.04	`1:2.17.0-1ubuntu1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.3`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.4`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.5`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.6`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.7`	fixed
Suse	git	hpe helion openstack 8	`2.26.2-27.36.1`	fixed
Suse	git	openstack cloud 7	`2.26.2-27.36.1`	fixed
Suse	git	openstack cloud 8	`2.26.2-27.36.1`	fixed
Suse	git	openstack cloud crowbar 8	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server for sap applications 12 sp1	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server for sap applications 12 sp2	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server for sap applications 12 sp3	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise software development kit 12 sp4	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise software development kit 12 sp5	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server 12 sp1-ltss	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server 12 sp2-ltss	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server 12 sp2-bcl	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server 12 sp3-ltss	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server 12 sp3-bcl	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server 12 sp4	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server for sap applications 12 sp4	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server 12 sp5	`2.26.2-27.36.1`	fixed
Suse	git	linux enterprise server for sap applications 12 sp5	`2.26.2-27.36.1`	fixed
Suse	git	enterprise storage 5	`2.26.2-27.36.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	git	source	sid	`1:2.26.2-1`	not yet assigned	Not reported	Not reported
Debian	git	source	forky	`1:2.26.2-1`	not yet assigned	Not reported	Not reported
Debian	git	source	trixie	`1:2.26.2-1`	not yet assigned	Not reported	Not reported
Debian	git	source	bookworm	`1:2.26.2-1`	not yet assigned	Not reported	Not reported
Alpine	git	apk	3.10	`2.22.4-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.11	`2.24.3-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.12	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.13	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.14	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.15	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.16	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.17	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.18	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.19	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.20	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.21	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.22	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.23	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.24	`2.26.2-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.8	`2.18.4-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Alpine	git	apk	3.9	`2.20.4-r0`	Not reported	ALPINE-CVE-2020-11008	Not reported
Ubuntu	git	deb	16.04	`1:2.7.4-0ubuntu1.9`	Not reported	USN-4334-1	Not reported
Ubuntu	git	deb	18.04	`1:2.17.1-1ubuntu0.7`	Not reported	USN-4334-1	Not reported
Ubuntu	git	deb	16.04	`1:2.7.4-0ubuntu1.9`	Not reported	UBUNTU-CVE-2020-11008	Not reported
Ubuntu	git	deb	18.04	`1:2.17.1-1ubuntu0.7`	Not reported	UBUNTU-CVE-2020-11008	Not reported
Suse	git	rpm	hpe helion openstack 8	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	openstack cloud 7	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	openstack cloud 8	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	openstack cloud crowbar 8	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp1	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp2	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp3	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise software development kit 12 sp4	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise software development kit 12 sp5	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp1-ltss	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp2-ltss	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp2-bcl	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp3-ltss	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp3-bcl	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp4	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp4	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp5	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp5	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported
Suse	git	rpm	enterprise storage 5	`2.26.2-27.36.1`	Not reported	SUSE-SU-2020:1295-1	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[git]Fixed
Details (4)
- 1:2.39.5-0+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-all]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-cvs]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-daemon-run]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-daemon-sysvinit]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-doc]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-email]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-gui]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[gitk]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-man]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-mediawiki]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[git-svn]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
[gitweb]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · bookworm; dsa · git · debian · 12

[Debian 13 (Trixie)]

[git]Fixed
Details (2)
- 1:2.47.3-0+deb13u1 · amd64 · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
- 1:2.47.3-0+deb13u1 · arm64 · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
[git-all]Fixed
Source package: [git]
Details (2)
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
[git-cvs]Fixed
Source package: [git]
Details (2)
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
[git-doc]Fixed
Source package: [git]
Details (2)
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
[git-email]Fixed
Source package: [git]
Details (2)
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
[git-gui]Fixed
Source package: [git]
Details (2)
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
[gitk]Fixed
Source package: [git]
Details (2)
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13
- 1:2.47.3-0+deb13u1 · all · trixie
  Fixed · Fixed: 1:2.26.2-1
  dsa · git · debian · 13

Next results

Observed: Oct 23, 2026, 5:46:50 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]