The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade git | Oct 26, 2018 | Oct 6, 2018 |
| Amazon Linux Ami 2 | — | Upgrade git-gnome-keyringUpgrade perl-Git-SVNUpgrade gitkUpgrade git-debuginfoUpgrade gitUpgrade git-emailUpgrade git-cvsUpgrade git-coreUpgrade git-p4Upgrade git-svnUpgrade git-allUpgrade gitwebUpgrade git-daemonUpgrade perl-GitUpgrade git-guiUpgrade git-core-doc | Apr 27, 2020 | Oct 6, 2018 |
| Amazon_linux | — | Upgrade git | Oct 19, 2018 | Oct 5, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 6, 2018 |
| Centos_linux | — | Upgrade gitkUpgrade git-cvsUpgrade git-gnome-keyringUpgrade git-debuginfoUpgrade git-instawebUpgrade perl-GitUpgrade emacs-git-elUpgrade git-allUpgrade gitUpgrade emacs-gitUpgrade git-p4Upgrade git-emailUpgrade git-bzrUpgrade git-hgUpgrade perl-Git-SVNUpgrade git-svnUpgrade git-guiUpgrade gitwebUpgrade git-daemon | Dec 15, 2018 | Oct 5, 2018 |
| Debian | — | Upgrade git | Oct 6, 2018 | Oct 5, 2018 |
| Freebsd | — | Upgrade libgit2 | Oct 16, 2018 | Oct 15, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade git | Dec 4, 2019 | Oct 6, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade git | Dec 11, 2018 | Oct 6, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade git | May 1, 2019 | Oct 6, 2018 |
| Oracle Solaris | — | Upgrade developer/versioning/git to version 2.19.2-0.175.3.36.0.11.0 on Solaris 11.3Upgrade developer/versioning/git to version 2.15.3-11.4.3.0.1.4.0 on Solaris 11.4 | Nov 19, 2018 | Oct 6, 2018 |
| Oracle_linux | — | Upgrade git-svnUpgrade git-hgUpgrade gitkUpgrade git-p4Upgrade emacs-gitUpgrade git-emailUpgrade git-gnome-keyringUpgrade gitUpgrade perl-Git-SVNUpgrade git-bzrUpgrade git-cvsUpgrade git-allUpgrade gitwebUpgrade perl-GitUpgrade git-daemonUpgrade git-instawebUpgrade emacs-git-elUpgrade git-gui | Feb 4, 2020 | Oct 5, 2018 |
| Redhat_linux | — | Upgrade git-debuginfoUpgrade emacs-git-elUpgrade gitwebUpgrade git-emailUpgrade git-cvsUpgrade git-bzrUpgrade gitUpgrade perl-GitUpgrade git-allUpgrade git-svnUpgrade git-gnome-keyringUpgrade git-hgUpgrade git-daemonUpgrade gitkUpgrade git-p4Upgrade git-instawebUpgrade perl-Git-SVNUpgrade git-guiUpgrade emacs-git | Oct 31, 2018 | Oct 6, 2018 |
| Suse | — | Upgrade libgit2-26-32bitUpgrade git-credential-gnome-keyringUpgrade git-cvsUpgrade git-emailUpgrade gitUpgrade libgit2-26Upgrade git-svnUpgrade git-archUpgrade git-credential-libsecretUpgrade git-webUpgrade git-p4Upgrade gitkUpgrade git-coreUpgrade git-guiUpgrade libgit2-develUpgrade git-docUpgrade libgit2-28Upgrade git-daemon | Oct 13, 2018 | Oct 5, 2018 |
| Ubuntu | — | Upgrade git | Oct 23, 2018 | Oct 5, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 6, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub