The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade git | Sep 20, 2017 | Apr 13, 2016 |
| Debian | — | Upgrade git | Feb 2, 2016 | Jan 5, 2016 |
| Freebsd | — | Upgrade gitUpgrade git-liteUpgrade git-guiUpgrade git-subversion | Dec 10, 2025 | Oct 19, 2015 |
| Gentoo Linux | — | Upgrade dev-vcs/git. | Oct 30, 2017 | Apr 13, 2016 |
| Oracle Solaris | — | Upgrade developer/versioning/mercurial-27 to version 4.1.3-0.175.3.20.0.3.0 on Solaris 11.3Upgrade developer/versioning/mercurial to version 4.1.3-0.175.3.20.0.3.0 on Solaris 11.3Upgrade developer/versioning/git to version 2.7.4-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 13, 2016 |
| Oracle_linux | — | Upgrade git-allUpgrade gitwebUpgrade emacs-gitUpgrade gitUpgrade git19-perl-GitUpgrade git19-gitUpgrade perl-GitUpgrade git-hgUpgrade git19-perl-Git-SVNUpgrade git19-git-cvsUpgrade emacs-git-elUpgrade git19-git-bzrUpgrade git19-emacs-gitUpgrade gitkUpgrade git19-git-guiUpgrade git19-git-svnUpgrade git19-git-allUpgrade git-cvsUpgrade git-bzrUpgrade git-svnUpgrade git19-git-daemonUpgrade git19-emacs-git-elUpgrade git-daemonUpgrade git-p4Upgrade git-guiUpgrade perl-Git-SVNUpgrade git-emailUpgrade git19-git-emailUpgrade git19-gitkUpgrade git19-gitwebUpgrade git19-git-hg | Oct 16, 2024 | Apr 13, 2016 |
| Suse | — | Upgrade gitkUpgrade git-emailUpgrade git-guiUpgrade git-webUpgrade git-daemonUpgrade git-archUpgrade git-svnUpgrade gitUpgrade git-cvsUpgrade mercurialUpgrade git-core | Jan 4, 2016 | Dec 19, 2015 |
| Ubuntu | — | Upgrade git | Dec 18, 2015 | Dec 15, 2015 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 25, 2025 | Apr 13, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub