The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade git | Aug 30, 2017 | Apr 8, 2016 |
| Centos_linux | — | Upgrade git-hgUpgrade git-emailUpgrade gitUpgrade git-bzrUpgrade git-p4Upgrade git-cvsUpgrade gitkUpgrade perl-Git-SVNUpgrade git-svnUpgrade gitwebUpgrade git-daemonUpgrade emacs-gitUpgrade git-guiUpgrade emacs-git-elUpgrade perl-GitUpgrade git-all | Jul 6, 2016 | Mar 23, 2016 |
| Debian | — | Upgrade git | Mar 22, 2016 | Mar 19, 2016 |
| Freebsd | — | Upgrade git | Dec 10, 2025 | Mar 17, 2016 |
| Gentoo Linux | — | Upgrade dev-vcs/git. | Oct 30, 2017 | Apr 8, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade git | Nov 30, 2017 | Apr 8, 2016 |
| Oracle Solaris | — | Upgrade developer/versioning/git to version 2.7.4-0.175.3.8.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 8, 2016 |
| Oracle_linux | — | Upgrade git-bzrUpgrade perl-Git-SVNUpgrade git-svnUpgrade emacs-git-elUpgrade gitUpgrade gitwebUpgrade git-allUpgrade git-daemonUpgrade gitkUpgrade perl-GitUpgrade git-p4Upgrade git-cvsUpgrade git-hgUpgrade git-emailUpgrade emacs-gitUpgrade git-gui | Apr 8, 2016 | Apr 8, 2016 |
| Suse | — | Upgrade git-emailUpgrade gitUpgrade git-archUpgrade git-coreUpgrade git-daemonUpgrade git-docUpgrade git-svnUpgrade git-cvsUpgrade git-guiUpgrade git-webUpgrade gitk | Mar 22, 2016 | Mar 16, 2016 |
| Ubuntu | — | Upgrade git | Mar 22, 2016 | Mar 21, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub