The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = 'origin', opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffi-debugsourceUpgrade rubygem-localeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-jwtUpgrade rubygem-amazing_printUpgrade rubygem-gssapiUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-loggingUpgrade rubygem-highlineUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-debuginfoUpgrade rubygem-oauthUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cliUpgrade rubygem-rest-clientUpgrade rubygem-fast_gettextUpgrade rubygem-clampUpgrade rubygem-http-cookieUpgrade rubygem-powerbarUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-multi_jsonUpgrade satellite-maintainUpgrade rubygem-unfUpgrade rubygem-domain_nameUpgrade rubygem-unicodeUpgrade satellite-cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hashieUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade rubygem-ffiUpgrade rubygem-mime-types | Nov 17, 2022 | Apr 19, 2022 |
| Debian | — | Upgrade ruby-git | Feb 1, 2023 | Apr 19, 2022 |
| Redhat_linux | — | Upgrade rubygem-ffi-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-foreman_maintainUpgrade rubygem-hashieUpgrade rubygem-fast_gettextUpgrade rubygem-amazing_printUpgrade rubygem-jwtUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-gssapiUpgrade rubygem-rest-clientUpgrade rubygem-unicode-debuginfoUpgrade foreman-cliUpgrade rubygem-hammer_cliUpgrade rubygem-localeUpgrade rubygem-highlineUpgrade rubygem-unfUpgrade rubygem-oauthUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-maintainUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-little-pluggerUpgrade rubygem-http-cookieUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-cloneUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-powerbarUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-domain_nameUpgrade rubygem-unf_extUpgrade rubygem-unicode-display_widthUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicodeUpgrade satellite-cliUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-netrcUpgrade rubygem-unf_ext-debuginfo | Nov 17, 2022 | Apr 19, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Apr 19, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub