The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
git_connect_git in connect.c in Git before 2.30.1 allows a repository path to contain a newline character, which may result in unexpected cross-protocol requests, as demonstrated by the git://localhost:1234/%0d%0a%0d%0aGET%20/%20HTTP/1.1 substring.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade git | Oct 1, 2024 | Aug 31, 2021 |
| Debian | — | Upgrade git | Oct 12, 2022 | Aug 31, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade git-helpUpgrade git | Feb 28, 2022 | Aug 31, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade git-coreUpgrade gitUpgrade git-core-doc | Jan 4, 2022 | Aug 31, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade gitUpgrade git-core-docUpgrade git-core | Dec 28, 2021 | Aug 31, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade git-helpUpgrade git | Jan 28, 2022 | Aug 31, 2021 |
| Oracle Solaris | — | Upgrade developer/versioning/git to version 2.30.2-11.4.33.0.1.94.0 on Solaris 11.4 | Oct 12, 2021 | Aug 31, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 31, 2021 |
| Suse | — | Upgrade git-svnUpgrade git-coreUpgrade git-webUpgrade git-docUpgrade git-credential-gnome-keyringUpgrade git-credential-libsecretUpgrade git-archUpgrade gitUpgrade git-emailUpgrade git-guiUpgrade git-p4Upgrade git-cvsUpgrade git-daemonUpgrade gitk | Oct 12, 2021 | Aug 31, 2021 |
| Ubuntu | — | Upgrade gitUpgrade git (Ubuntu Pro) | Sep 14, 2021 | Aug 31, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 31, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub