contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade gitkUpgrade git-guiUpgrade gitwebUpgrade perl-GitUpgrade git-allUpgrade emacs-gitUpgrade emacs-git-elUpgrade perl-Git-SVNUpgrade git-daemonUpgrade git-p4Upgrade gitUpgrade git-cvsUpgrade git-bzrUpgrade git-svnUpgrade git-hgUpgrade git-debuginfoUpgrade git-email | Aug 28, 2019 | Mar 20, 2017 |
| Debian | — | Upgrade git | Jul 30, 2024 | Mar 20, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade git | Nov 30, 2017 | Mar 19, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade git | Nov 30, 2017 | Mar 19, 2017 |
| Oracle_linux | — | Upgrade git-emailUpgrade git-p4Upgrade gitwebUpgrade emacs-git-elUpgrade gitkUpgrade git-hgUpgrade gitUpgrade git-allUpgrade emacs-gitUpgrade perl-GitUpgrade git-daemonUpgrade git-svnUpgrade perl-Git-SVNUpgrade git-guiUpgrade git-bzrUpgrade git-cvs | Aug 8, 2017 | Apr 22, 2014 |
| Redhat_linux | — | Upgrade git-allUpgrade git-cvsUpgrade gitUpgrade emacs-git-elUpgrade gitwebUpgrade perl-GitUpgrade git-bzrUpgrade git-svnUpgrade gitkUpgrade git-p4Upgrade git-hgUpgrade git-guiUpgrade git-daemonUpgrade emacs-gitUpgrade git-debuginfoUpgrade perl-Git-SVNUpgrade git-email | Aug 3, 2017 | Mar 19, 2017 |
| Ubuntu | — | Upgrade git | Mar 24, 2017 | Mar 19, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub