Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2021-3280

Высокий

ALT-PU-2021-3280: package git update to version 2.33.1-alt1

Источник
errata.altlinux.org
Дата публикации
15.11.2021
Дата обновления
15.11.2021
Устраненные уязвимости
1

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades git to version 2.33.1-alt1.

Устраненные уязвимости1

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 5 лет назад

git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.

CVSS3: 7.5
redhat
почти 6 лет назад

git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.

CVSS3: 7.5
nvd
около 5 лет назад

git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.

CVSS3: 7.5
msrc
около 5 лет назад

git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character which may result in unexpected cross-protocol requests as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.

CVSS3: 7.5
debian
около 5 лет назад

git_connect_git in connect.c in Git before 2.30.1 allows a repository ...