The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before 2.23.1, and 2.24.x before 2.24.1 because a "git submodule update" operation can run commands found in the .gitmodules file of a malicious repository.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade git | Aug 22, 2024 | Dec 10, 2019 |
| Amazon Linux Ami 2 | — | Upgrade git-daemonUpgrade gitwebUpgrade perl-Git-SVNUpgrade git-guiUpgrade git-coreUpgrade git-subtreeUpgrade git-instawebUpgrade git-svnUpgrade gitkUpgrade git-allUpgrade git-cvsUpgrade git-debuginfoUpgrade perl-GitUpgrade git-emailUpgrade git-core-docUpgrade git-p4Upgrade git | Apr 27, 2020 | Dec 11, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 10, 2019 |
| Debian | — | Upgrade git | Jul 30, 2024 | Dec 11, 2019 |
| Freebsd | — | Upgrade gitlab-ce | Dec 11, 2019 | Dec 10, 2019 |
| Gentoo Linux | — | Upgrade dev-vcs/git. | Mar 16, 2020 | Dec 11, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade gitUpgrade git-core-docUpgrade git-core | Feb 24, 2020 | Dec 11, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade git-coreUpgrade gitUpgrade git-core-doc | Feb 26, 2020 | Dec 11, 2019 |
| Oracle Solaris | — | Upgrade developer/versioning/git to version 2.19.3-11.4.19.0.1.1.0 on Solaris 11.4 | Jan 19, 2021 | Dec 11, 2019 |
| Suse | — | Upgrade gitUpgrade git-coreUpgrade git-credential-libsecretUpgrade git-webUpgrade perl-Net-SMTP-SSLUpgrade git-svnUpgrade git-docUpgrade git-daemonUpgrade git-credential-gnome-keyringUpgrade git-guiUpgrade git-p4Upgrade git-archUpgrade git-emailUpgrade perl-Authen-SASLUpgrade gitkUpgrade git-cvs | Dec 17, 2019 | Dec 10, 2019 |
| Ubuntu | — | Upgrade git | Dec 11, 2019 | Dec 10, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 10, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub