The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade git | Aug 30, 2017 | Apr 8, 2016 |
| Centos_linux | — | Upgrade gitUpgrade git-p4Upgrade perl-Git-SVNUpgrade git-emailUpgrade git-cvsUpgrade git-bzrUpgrade git-svnUpgrade gitkUpgrade git-hgUpgrade emacs-git-elUpgrade perl-GitUpgrade emacs-gitUpgrade git-daemonUpgrade git-allUpgrade gitwebUpgrade git-gui | Jul 6, 2016 | Mar 23, 2016 |
| Debian | — | Upgrade git | Mar 22, 2016 | Mar 19, 2016 |
| Freebsd | — | Upgrade git | Dec 10, 2025 | Mar 17, 2016 |
| Gentoo Linux | — | Upgrade dev-vcs/git. | Oct 30, 2017 | Apr 8, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade git | Nov 30, 2017 | Apr 8, 2016 |
| Oracle Solaris | — | Upgrade developer/versioning/git to version 2.7.4-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 8, 2016 |
| Oracle_linux | — | Upgrade git-guiUpgrade git-emailUpgrade git-hgUpgrade git-cvsUpgrade perl-GitUpgrade emacs-gitUpgrade git-daemonUpgrade git-p4Upgrade gitkUpgrade git-bzrUpgrade git-allUpgrade emacs-git-elUpgrade perl-Git-SVNUpgrade gitUpgrade gitwebUpgrade git-svn | Apr 8, 2016 | Apr 8, 2016 |
| Suse | — | Upgrade gitkUpgrade git-guiUpgrade git-webUpgrade git-emailUpgrade git-docUpgrade git-daemonUpgrade gitUpgrade git-svnUpgrade git-cvsUpgrade git-archUpgrade git-core | Mar 22, 2016 | Mar 16, 2016 |
| Ubuntu | — | Upgrade git | Mar 22, 2016 | Mar 21, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub