Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was a dangerous change from execvp to execv during 2017.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade git | Dec 5, 2018 | Nov 23, 2018 |
| Amazon Linux Ami 2 | — | Upgrade perl-Git-SVNUpgrade git-daemonUpgrade git-svnUpgrade git-guiUpgrade git-coreUpgrade perl-GitUpgrade git-cvsUpgrade git-subtreeUpgrade git-debuginfoUpgrade gitkUpgrade gitwebUpgrade git-core-docUpgrade git-p4Upgrade git-emailUpgrade git-allUpgrade git | Apr 27, 2020 | Nov 23, 2018 |
| Amazon_linux | — | Upgrade git | Dec 21, 2018 | Nov 23, 2018 |
| Debian | — | Upgrade git | Jul 30, 2024 | Nov 23, 2018 |
| Gentoo Linux | — | Upgrade dev-vcs/git. | Apr 12, 2019 | Nov 23, 2018 |
| Oracle Solaris | — | Upgrade developer/versioning/git to version 2.19.2-0.175.3.36.0.11.0 on Solaris 11.3Upgrade developer/versioning/git to version 2.19.2-11.4.6.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Nov 23, 2018 |
| Suse | — | Upgrade git-credential-libsecretUpgrade gitkUpgrade git-webUpgrade git-docUpgrade git-coreUpgrade gitUpgrade git-emailUpgrade git-daemonUpgrade git-cvsUpgrade git-guiUpgrade git-archUpgrade git-p4Upgrade git-credential-gnome-keyringUpgrade git-svn | Dec 23, 2018 | Nov 23, 2018 |
| Ubuntu | — | Upgrade git | Dec 4, 2018 | Nov 23, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 23, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub