Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-8904

Критический

ALT-PU-2024-8904: package git update to version 2.42.2-alt1

Источник
errata.altlinux.org
Дата публикации
14.06.2024
Дата обновления
07.03.2026
Устраненные уязвимости
14

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades git to version 2.42.2-alt1.

Устраненные уязвимости14

Связанные уязвимости

CVSS3: 8.6
altlinux
около 3 лет назад

ALT-PU-2023-6975: package `git` update to version 2.42.1-alt1

CVSS3: 7.5
ubuntu
больше 4 лет назад

The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk.

CVSS3: 7.5
redhat
больше 4 лет назад

The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk.

CVSS3: 7.5
nvd
больше 4 лет назад

The --mirror documentation for Git through 2.35.1 does not mention the availability of deleted content, aka the "GitBleed" issue. This could present a security risk if information-disclosure auditing processes rely on a clone operation without the --mirror option. Note: This has been disputed by multiple 3rd parties who believe this is an intended feature of the git binary and does not pose a security risk.

CVSS3: 7.5
debian
больше 4 лет назад

The --mirror documentation for Git through 2.35.1 does not mention the ...