CVE catalog

CVE-2022-24765

git: CVE-2022-24765

Severity: High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Apr 12, 2022, 10:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 1.01% · Oct 25, 2026

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder `C:\.git`, which would be picked up by Git operations run supposedly outside a repository while searching for a Git directory. Git would then respect any config in said Git directory. Git Bash users who set `GIT_PS1_SHOWDIRTYSTATE` are vulnerable as well. Users who installed posh-gitare vulnerable simply by starting a PowerShell. Users of IDEs such as Visual Studio are vulnerable: simply creating a new project would already read and respect the config specified in `C:\.git\config`. Users of the Microsoft fork of Git are vulnerable simply by starting a Git Bash. The problem has been patched in Git for Windows v2.35.2. Users unable to upgrade may create the folder `.git` on all drives where Git commands are run, and remove read/write access from those folders as a workaround. Alternatively, define or extend `GIT_CEILING_DIRECTORIES` to cover the _parent_ directory of the user profile, e.g. `C:\Users` if the user profile is located in `C:\Users\my-user-name`.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	git	sid	`1:2.55.0-1`	fixed
Debian	git	forky	`1:2.53.0-1`	fixed
Debian	git	trixie	`1:2.47.3-0+deb13u1`	fixed
Debian	git	bookworm	`1:2.39.5-0+deb12u3`	fixed
Debian	git	bookworm-security	`1:2.39.5-0+deb12u2`	fixed
Ubuntu	git	18.04	`1:2.14.1-1ubuntu4`	vulnerable
Ubuntu	git	18.04	`1:2.15.1-1ubuntu2`	vulnerable
Ubuntu	git	18.04	`1:2.17.0-1ubuntu1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.3`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.4`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.5`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.6`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.7`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.8`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.9`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.10`	fixed
Ubuntu	git	20.04	`1:2.20.1-2ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.3`	fixed
Ubuntu	git	22.04	`1:2.32.0-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.33.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.1`	fixed
Suse	git	linux enterprise high performance computing 15-espos	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise high performance computing 15-ltss	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise high performance computing 15 sp1-espos	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise high performance computing 15 sp1-ltss	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise high performance computing 15 sp2-espos	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise high performance computing 15 sp2-ltss	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise real time 15 sp2	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise server 15-ltss	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise server 15 sp1-bcl	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise server 15 sp1-ltss	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise server 15 sp2-bcl	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise server 15 sp2-ltss	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise server for sap applications 15	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise server for sap applications 15 sp1	`2.26.2-150000.36.1`	fixed
Suse	git	linux enterprise server for sap applications 15 sp2	`2.26.2-150000.36.1`	fixed
Suse	git	manager proxy 4.1	`2.26.2-150000.36.1`	fixed
Suse	git	manager retail branch server 4.1	`2.26.2-150000.36.1`	fixed
Suse	git	manager server 4.1	`2.26.2-150000.36.1`	fixed
Suse	git	enterprise storage 6	`2.26.2-150000.36.1`	fixed
Suse	git	enterprise storage 7	`2.26.2-150000.36.1`	fixed
Opensuse	git	leap 15.3	`2.26.2-150000.36.1`	fixed
Opensuse	libgit2	tumbleweed	`1.4.3-1.1`	fixed
Suse	libgit2	linux enterprise module for development tools 15 sp3	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	manager server module 4.1	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	manager server module 4.2	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	manager server module 4.3	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	linux enterprise high performance computing 15 sp2-espos	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	linux enterprise high performance computing 15 sp2-ltss	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	linux enterprise server 15 sp2-bcl	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	linux enterprise server 15 sp2-ltss	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	linux enterprise server for sap applications 15 sp2	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	manager proxy 4.1	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	manager retail branch server 4.1	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	manager server 4.1	`0.28.4-150200.3.3.1`	fixed
Suse	libgit2	enterprise storage 7	`0.28.4-150200.3.3.1`	fixed
Opensuse	libgit2	leap 15.3	`0.28.4-150200.3.3.1`	fixed
Opensuse	libgit2	leap 15.4	`0.28.4-150200.3.3.1`	fixed
Suse	git	hpe helion openstack 8	`2.26.2-27.52.1`	fixed
Suse	git	openstack cloud 8	`2.26.2-27.52.1`	fixed
Suse	git	openstack cloud 9	`2.26.2-27.52.1`	fixed
Suse	git	openstack cloud crowbar 8	`2.26.2-27.52.1`	fixed
Suse	git	openstack cloud crowbar 9	`2.26.2-27.52.1`	fixed
Suse	git	linux enterprise server for sap applications 12 sp3	`2.26.2-27.52.1`	fixed
Suse	git	linux enterprise server for sap applications 12 sp4	`2.26.2-27.52.1`	fixed
Suse	git	linux enterprise software development kit 12 sp5	`2.26.2-27.52.1`	fixed
Suse	git	linux enterprise server 12 sp2-bcl	`2.26.2-27.52.1`	fixed
Suse	git	linux enterprise server 12 sp3-ltss	`2.26.2-27.52.1`	fixed
Suse	git	linux enterprise server 12 sp3-bcl	`2.26.2-27.52.1`	fixed
Suse	git	linux enterprise server 12 sp4-ltss	`2.26.2-27.52.1`	fixed
Suse	git	linux enterprise server 12 sp5	`2.26.2-27.52.1`	fixed
Suse	git	linux enterprise server for sap applications 12 sp5	`2.26.2-27.52.1`	fixed
Suse	libgit2	linux enterprise module for development tools 15 sp4	`1.3.0-150400.3.3.1`	fixed
Opensuse	libgit2	leap 15.4	`1.3.0-150400.3.3.1`	fixed
Suse	git	linux enterprise module for basesystem 15 sp3	`2.35.3-150300.10.12.1`	fixed
Suse	git	linux enterprise module for development tools 15 sp3	`2.35.3-150300.10.12.1`	fixed
Opensuse	git	leap 15.3	`2.35.3-150300.10.12.1`	fixed
Opensuse	git	leap 15.4	`2.35.3-150300.10.12.1`	fixed
Ubuntu	git	18.04	`1:2.14.1-1ubuntu4`	vulnerable
Ubuntu	git	18.04	`1:2.15.1-1ubuntu2`	vulnerable
Ubuntu	git	18.04	`1:2.17.0-1ubuntu1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.1`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.3`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.4`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.5`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.6`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.7`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.8`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.9`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.10`	vulnerable
Ubuntu	git	18.04	`1:2.17.1-1ubuntu0.11`	fixed
Ubuntu	git	20.04	`1:2.20.1-2ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.24.0-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.0-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.1`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.2`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.3`	vulnerable
Ubuntu	git	20.04	`1:2.25.1-1ubuntu3.4`	fixed
Ubuntu	git	22.04	`1:2.32.0-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.33.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.1`	vulnerable
Ubuntu	git	22.04	`1:2.34.1-1ubuntu1.2`	fixed
Opensuse	git	tumbleweed	`2.35.3-1.1`	fixed
Opensuse	git-annex	tumbleweed	`10.20220624-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	git	source	sid	`1:2.35.2-1`	not yet assigned	Not reported	Not reported
Debian	git	source	forky	`1:2.35.2-1`	not yet assigned	Not reported	Not reported
Debian	git	source	trixie	`1:2.35.2-1`	not yet assigned	Not reported	Not reported
Debian	git	source	bookworm	`1:2.35.2-1`	not yet assigned	Not reported	Not reported
Ubuntu	git	deb	18.04	`1:2.17.1-1ubuntu0.10`	Not reported	USN-5376-1	Not reported
Ubuntu	git	deb	20.04	`1:2.25.1-1ubuntu3.3`	Not reported	USN-5376-1	Not reported
Ubuntu	git	deb	22.04	`1:2.34.1-1ubuntu1.1`	Not reported	USN-5376-2	Not reported
Suse	git	rpm	linux enterprise high performance computing 15-espos	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15-ltss	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp1-espos	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp1-ltss	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp2-espos	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise high performance computing 15 sp2-ltss	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise real time 15 sp2	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise server 15-ltss	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise server 15 sp1-bcl	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise server 15 sp1-ltss	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise server 15 sp2-bcl	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise server 15 sp2-ltss	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 15	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 15 sp1	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 15 sp2	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	manager proxy 4.1	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	manager retail branch server 4.1	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	manager server 4.1	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	enterprise storage 6	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Suse	git	rpm	enterprise storage 7	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Opensuse	git	rpm	leap 15.3	`2.26.2-150000.36.1`	Not reported	SUSE-SU-2022:1260-1	Not reported
Opensuse	libgit2	rpm	tumbleweed	`1.4.3-1.1`	Not reported	OPENSUSE-SU-2024:12005-1	Not reported
Suse	libgit2	rpm	linux enterprise module for development tools 15 sp3	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	manager server module 4.1	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	manager server module 4.2	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	manager server module 4.3	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	linux enterprise high performance computing 15 sp2-espos	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	linux enterprise high performance computing 15 sp2-ltss	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	linux enterprise server 15 sp2-bcl	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	linux enterprise server 15 sp2-ltss	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	linux enterprise server for sap applications 15 sp2	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	manager proxy 4.1	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	manager retail branch server 4.1	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	manager server 4.1	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	libgit2	rpm	enterprise storage 7	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Opensuse	libgit2	rpm	leap 15.3	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Opensuse	libgit2	rpm	leap 15.4	`0.28.4-150200.3.3.1`	Not reported	SUSE-SU-2022:3494-1	Not reported
Suse	git	rpm	hpe helion openstack 8	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	openstack cloud 8	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	openstack cloud 9	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	openstack cloud crowbar 8	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	openstack cloud crowbar 9	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp3	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp4	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	linux enterprise software development kit 12 sp5	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp2-bcl	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp3-ltss	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp3-bcl	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp4-ltss	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	linux enterprise server 12 sp5	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	git	rpm	linux enterprise server for sap applications 12 sp5	`2.26.2-27.52.1`	Not reported	SUSE-SU-2022:1306-1	Not reported
Suse	libgit2	rpm	linux enterprise module for development tools 15 sp4	`1.3.0-150400.3.3.1`	Not reported	SUSE-SU-2022:3283-1	Not reported
Opensuse	libgit2	rpm	leap 15.4	`1.3.0-150400.3.3.1`	Not reported	SUSE-SU-2022:3283-1	Not reported
Suse	git	rpm	linux enterprise module for basesystem 15 sp3	`2.35.3-150300.10.12.1`	Not reported	SUSE-SU-2022:1484-1	Not reported
Suse	git	rpm	linux enterprise module for development tools 15 sp3	`2.35.3-150300.10.12.1`	Not reported	SUSE-SU-2022:1484-1	Not reported
Opensuse	git	rpm	leap 15.3	`2.35.3-150300.10.12.1`	Not reported	SUSE-SU-2022:1484-1	Not reported
Opensuse	git	rpm	leap 15.4	`2.35.3-150300.10.12.1`	Not reported	SUSE-SU-2022:1484-1	Not reported
Ubuntu	git	deb	18.04	`1:2.17.1-1ubuntu0.11`	Not reported	UBUNTU-CVE-2022-24765	Not reported
Ubuntu	git	deb	20.04	`1:2.25.1-1ubuntu3.4`	Not reported	UBUNTU-CVE-2022-24765	Not reported
Ubuntu	git	deb	22.04	`1:2.34.1-1ubuntu1.2`	Not reported	UBUNTU-CVE-2022-24765	Not reported
Opensuse	git	rpm	tumbleweed	`2.35.3-1.1`	Not reported	OPENSUSE-SU-2024:12003-1	Not reported
Opensuse	git-annex	rpm	tumbleweed	`10.20220624-1.1`	Not reported	OPENSUSE-SU-2024:12223-1	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[git]Unknown
Details (4)
- 1:2.39.5-0+deb12u3 · amd64 · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · arm64 · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · amd64 · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · arm64 · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-all]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-cvs]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-daemon-run]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-daemon-sysvinit]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-doc]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-email]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-gui]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[gitk]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-man]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-mediawiki]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[git-svn]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
[gitweb]Unknown
Source package: [git]
Details (4)
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u3 · all · bookworm
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm
- 1:2.39.5-0+deb12u2 · all · bookworm-security
  Fixed · Fixed: 1:2.35.2-1
  dsa · git · debian · bookworm

[openSUSE Tumbleweed]

[git]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Fixed · Fixed: 2.35.3-1.1
  dsa · git · opensuse · tumbleweed
[git-annex]Unknown
Source package: [git-annex]
Details (1)
- 10.20260624-1.3 · x86_64 · tumbleweed
  Fixed · Fixed: 10.20220624-1.1
  dsa · git-annex · opensuse · tumbleweed
[git-annex-bash-completion]Unknown
Source package: [git-annex]
Details (1)
- 10.20260624-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 10.20220624-1.1
  Version impact unknown
  dsa · git-annex · opensuse · tumbleweed
[git-arch]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.35.3-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-core]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.35.3-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-credential-libsecret]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.35.3-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed
[git-cvs]Unknown
Source package: [git]
Details (1)
- 2.55.0-3.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.35.3-1.1
  Version impact unknown
  dsa · git · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 6:24:47 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]