CVE catalog

CVE-2022-23521

git: CVE-2022-23521

Severity: Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: Jan 1, 2022, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 56.33% · Oct 25, 2026

Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge. These overflows can be triggered via a crafted `.gitattributes` file that may be part of the commit history. Git silently splits lines longer than 2KB when parsing gitattributes from a file, but not when parsing them from the index. Consequentially, the failure mode depends on whether the file exists in the working tree, the index or both. This integer overflow can result in arbitrary heap reads and writes, which may result in remote code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. There are no known workarounds for this issue.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	git	sid	`1:2.55.0-1`	fixed
Debian	git	forky	`1:2.53.0-1`	fixed
Debian	git	trixie	`1:2.47.3-0+deb13u1`	fixed
Debian	git	bookworm	`1:2.39.5-0+deb12u3`	fixed
Debian	git	bookworm-security	`1:2.39.5-0+deb12u2`	fixed
Ubuntu	git	pro	`1:1.8.3.2-1`	vulnerable
Ubuntu	git	pro	`1:1.8.4.2-1`	vulnerable
Ubuntu	git	pro	`1:1.8.4.3-1`	vulnerable
Ubuntu	git	pro	`1:1.8.4.4-1`	vulnerable
Ubuntu	git	pro	`1:1.8.5-1`	vulnerable
Ubuntu	git	pro	`1:1.8.5.1-1`	vulnerable
Ubuntu	git	pro	`1:1.8.5.2-1`	vulnerable
Ubuntu	git	pro	`1:1.8.5.2-2`	vulnerable
Ubuntu	git	pro	`1:1.8.5.3-1`	vulnerable
Ubuntu	git	pro	`1:1.9~rc1-1`	vulnerable
Ubuntu	git	pro	`1:1.9.0-1`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.1`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.2`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.3`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.4`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.5`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.6`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.7`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.8`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.9`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.10`	vulnerable
Ubuntu	git	pro	`1:1.9.1-1ubuntu0.10+esm1`	fixed
Ubuntu	git	pro	`1:2.5.0-1`	vulnerable
Ubuntu	git	pro	`1:2.6.2-1`	vulnerable
Ubuntu	git	pro	`1:2.6.3-1`	vulnerable
Ubuntu	git	pro	`1:2.6.4-1`	vulnerable
Ubuntu	git	pro	`1:2.7.0~rc3-1`	vulnerable
Ubuntu	git	pro	`1:2.7.0-1`	vulnerable
Ubuntu	git	pro	`1:2.7.3-0ubuntu1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.2`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.3`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.4`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.5`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.6`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.7`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.8`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.9`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm3`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm4`	fixed
Ubuntu	git	18.04	`1:2.14.1-1ubuntu4`	vulnerable
Ubuntu	git	18.04	`1:2.15.1-1ubuntu2`	vulnerable
Ubuntu	git	18.04	`1:2.17.0-1ubuntu1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.3`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.4`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.5`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.6`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.7`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.8`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.9`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.10`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.11`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.12`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.13`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.14`	fixed
Ubuntu	git	20.04	`1:2.20.1-2ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.4`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.5`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.6`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.7`	fixed
Ubuntu	git	22.04	`1:2.32.0-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.33.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.2`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.4`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.5`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.6`	fixed
Suse	git	linux enterprise module for basesystem 15 sp4	`2.35.3-150300.10.21.1`	fixed
Suse	git	linux enterprise module for development tools 15 sp4	`2.35.3-150300.10.21.1`	fixed
Suse	git	linux enterprise high performance computing 15 sp3-espos	`2.35.3-150300.10.21.1`	fixed
Suse	git	linux enterprise high performance computing 15 sp3-ltss	`2.35.3-150300.10.21.1`	fixed
Suse	git	linux enterprise real time 15 sp3	`2.35.3-150300.10.21.1`	fixed
Suse	git	linux enterprise server 15 sp3-ltss	`2.35.3-150300.10.21.1`	fixed
Suse	git	linux enterprise server for sap applications 15 sp3	`2.35.3-150300.10.21.1`	fixed
Suse	git	manager proxy 4.2	`2.35.3-150300.10.21.1`	fixed
Suse	git	manager retail branch server 4.2	`2.35.3-150300.10.21.1`	fixed
Suse	git	manager server 4.2	`2.35.3-150300.10.21.1`	fixed
Suse	git	enterprise storage 7.1	`2.35.3-150300.10.21.1`	fixed
Opensuse	git	leap 15.4	`2.35.3-150300.10.21.1`	fixed
Ubuntu	git	pro	`1:2.5.0-1`	vulnerable
Ubuntu	git	pro	`1:2.6.2-1`	vulnerable
Ubuntu	git	pro	`1:2.6.3-1`	vulnerable
Ubuntu	git	pro	`1:2.6.4-1`	vulnerable
Ubuntu	git	pro	`1:2.7.0~rc3-1`	vulnerable
Ubuntu	git	pro	`1:2.7.0-1`	vulnerable
Ubuntu	git	pro	`1:2.7.3-0ubuntu1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.2`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.3`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.4`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.5`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.6`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.7`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.8`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.9`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm1`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm3`	vulnerable
Ubuntu	git	pro	`1:2.7.4-0ubuntu1.10+esm4`	fixed
Ubuntu	git	18.04	`1:2.14.1-1ubuntu4`	vulnerable
Ubuntu	git	18.04	`1:2.15.1-1ubuntu2`	vulnerable
Ubuntu	git	18.04	`1:2.17.0-1ubuntu1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.3`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.4`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.5`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.6`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.7`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.8`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.9`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.10`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.11`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.12`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.13`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.14`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.15`	fixed
Ubuntu	git	20.04	`1:2.20.1-2ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.4`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.5`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.6`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.7`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.8`	fixed
Ubuntu	git	22.04	`1:2.32.0-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.33.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.2`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.4`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.5`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.6`	fixed
Suse	git	linux enterprise high performance computing 15 sp1-ltss	`2.26.2-150000.44.1`	fixed
Suse	git	linux enterprise high performance computing 15 sp2-ltss	`2.26.2-150000.44.1`	fixed
Suse	git	linux enterprise server 15 sp1-ltss	`2.26.2-150000.44.1`	fixed
Suse	git	linux enterprise server 15 sp2-ltss	`2.26.2-150000.44.1`	fixed
Suse	git	linux enterprise server for sap applications 15 sp1	`2.26.2-150000.44.1`	fixed
Suse	git	linux enterprise server for sap applications 15 sp2	`2.26.2-150000.44.1`	fixed
Suse	git	enterprise storage 6	`2.26.2-150000.44.1`	fixed
Suse	git	enterprise storage 7	`2.26.2-150000.44.1`	fixed
Opensuse	git	leap 15.4	`2.26.2-150000.44.1`	fixed
Opensuse	git	tumbleweed	`2.39.1-1.1`	fixed
Suse	git	hpe helion openstack 8	`2.26.2-27.63.2`	fixed
Suse	git	openstack cloud 8	`2.26.2-27.63.2`	fixed
Suse	git	openstack cloud 9	`2.26.2-27.63.2`	fixed
Suse	git	openstack cloud crowbar 9	`2.26.2-27.63.2`	fixed
Suse	git	linux enterprise server for sap applications 12 sp4	`2.26.2-27.63.2`	fixed
Suse	git	linux enterprise software development kit 12 sp5	`2.26.2-27.63.2`	fixed
Suse	git	linux enterprise server 12 sp2-bcl	`2.26.2-27.63.2`	fixed
Suse	git	linux enterprise server 12 sp4-ltss	`2.26.2-27.63.2`	fixed
Suse	git	linux enterprise server 12 sp5	`2.26.2-27.63.2`	fixed
Suse	git	linux enterprise server for sap applications 12 sp5	`2.26.2-27.63.2`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	git	source	sid	`1:2.39.1-0.1`	not yet assigned	Not reported	[1029114]
Debian	git	source	forky	`1:2.39.1-0.1`	not yet assigned	Not reported	[1029114]
Debian	git	source	trixie	`1:2.39.1-0.1`	not yet assigned	Not reported	[1029114]
Debian	git	source	bookworm	`1:2.39.1-0.1`	not yet assigned	Not reported	[1029114]
Ubuntu	git	deb	pro	`1:1.9.1-1ubuntu0.10+esm1`	Not reported	USN-5810-4	Not reported
Ubuntu	git	deb	pro	`1:2.7.4-0ubuntu1.10+esm4`	Not reported	USN-5810-3	Not reported
Ubuntu	git	deb	18.04	`1:2.17.1-1ubuntu0.14`	Not reported	USN-5810-1	Not reported
Ubuntu	git	deb	20.04	`1:2.25.1-1ubuntu3.7`	Not reported	USN-5810-1	Not reported
Ubuntu	git	deb	22.04	`1:2.34.1-1ubuntu1.6`	Not reported	USN-5810-1	Not reported
Suse	git	rpm	linux enterprise module for basesystem 15 sp4	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	linux enterprise module for development tools 15 sp4	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp3-espos	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp3-ltss	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	linux enterprise real time 15 sp3	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	linux enterprise server 15 sp3-ltss	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 15 sp3	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	manager proxy 4.2	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	manager retail branch server 4.2	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	manager server 4.2	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Suse	git	rpm	enterprise storage 7.1	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Opensuse	git	rpm	leap 15.4	`2.35.3-150300.10.21.1`	Not reported	SUSE-SU-2023:0110-1	Not reported
Ubuntu	git	deb	pro	`1:2.7.4-0ubuntu1.10+esm4`	Not reported	UBUNTU-CVE-2022-23521	Not reported
Ubuntu	git	deb	18.04	`1:2.17.1-1ubuntu0.15`	Not reported	UBUNTU-CVE-2022-23521	Not reported
Ubuntu	git	deb	20.04	`1:2.25.1-1ubuntu3.8`	Not reported	UBUNTU-CVE-2022-23521	Not reported
Ubuntu	git	deb	22.04	`1:2.34.1-1ubuntu1.6`	Not reported	UBUNTU-CVE-2022-23521	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp1-ltss	`2.26.2-150000.44.1`	Not reported	SUSE-SU-2023:0108-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp2-ltss	`2.26.2-150000.44.1`	Not reported	SUSE-SU-2023:0108-1	Not reported
Suse	git	rpm	linux enterprise server 15 sp1-ltss	`2.26.2-150000.44.1`	Not reported	SUSE-SU-2023:0108-1	Not reported
Suse	git	rpm	linux enterprise server 15 sp2-ltss	`2.26.2-150000.44.1`	Not reported	SUSE-SU-2023:0108-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 15 sp1	`2.26.2-150000.44.1`	Not reported	SUSE-SU-2023:0108-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 15 sp2	`2.26.2-150000.44.1`	Not reported	SUSE-SU-2023:0108-1	Not reported
Suse	git	rpm	enterprise storage 6	`2.26.2-150000.44.1`	Not reported	SUSE-SU-2023:0108-1	Not reported
Suse	git	rpm	enterprise storage 7	`2.26.2-150000.44.1`	Not reported	SUSE-SU-2023:0108-1	Not reported
Opensuse	git	rpm	leap 15.4	`2.26.2-150000.44.1`	Not reported	SUSE-SU-2023:0108-1	Not reported
Opensuse	git	rpm	tumbleweed	`2.39.1-1.1`	Not reported	OPENSUSE-SU-2024:12625-1	Not reported
Suse	git	rpm	hpe helion openstack 8	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported
Suse	git	rpm	openstack cloud 8	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported
Suse	git	rpm	openstack cloud 9	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported
Suse	git	rpm	openstack cloud crowbar 9	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp4	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported
Suse	git	rpm	linux enterprise software development kit 12 sp5	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp2-bcl	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp4-ltss	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp5	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp5	`2.26.2-27.63.2`	Not reported	SUSE-SU-2023:0109-1	Not reported

[Debian bug #1029114]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[git-arch]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-core]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-credential-libsecret]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-cvs]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-daemon]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-doc]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · noarch · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-email]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-gui]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[gitk]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-p4]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-svn]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-web]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[perl-Git]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.39.1-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[git]Fixed
Details (4)
- 1:2.39.5-0+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
[git-all]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
[git-cvs]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
[git-daemon-run]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
[git-daemon-sysvinit]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
[git-doc]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
[git-email]Fixed
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.39.1-0.1
  dsa · git · debian · bookworm

Next results

Observed: Oct 23, 2026, 6:24:41 PM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]