The package git before 1.11.0 are vulnerable to Command Injection via git argument injection. When calling the fetch(remote = 'origin', opts = {}) function, the remote parameter is passed to the git fetch subcommand in a way that additional flags can be set. The additional flags can be used to perform a command injection.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-jwtUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debugsourceUpgrade rubygem-oauthUpgrade rubygem-unicode-debugsourceUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffi-debuginfoUpgrade rubygem-mime-types-dataUpgrade rubygem-localeUpgrade rubygem-highlineUpgrade rubygem-loggingUpgrade rubygem-gssapiUpgrade rubygem-rest-clientUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-clampUpgrade rubygem-fast_gettextUpgrade rubygem-little-pluggerUpgrade satellite-maintainUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-netrcUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-mime-typesUpgrade satellite-cloneUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_extUpgrade rubygem-domain_nameUpgrade satellite-cliUpgrade rubygem-unicodeUpgrade rubygem-unfUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade python39-pulp_manifestUpgrade rubygem-hashie | Nov 17, 2022 | Apr 19, 2022 |
| Debian | — | Upgrade ruby-git | Feb 1, 2023 | Apr 19, 2022 |
| Redhat_linux | — | Upgrade rubygem-oauthUpgrade rubygem-clampUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-fast_gettextUpgrade foreman-cliUpgrade rubygem-highlineUpgrade rubygem-gssapiUpgrade rubygem-amazing_printUpgrade rubygem-jwtUpgrade rubygem-unfUpgrade rubygem-foreman_maintainUpgrade rubygem-hashieUpgrade rubygem-localeUpgrade rubygem-unicode-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-mime-types-dataUpgrade rubygem-ffi-debuginfoUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-loggingUpgrade rubygem-multi_jsonUpgrade rubygem-unicodeUpgrade rubygem-http-cookieUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_extUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffiUpgrade rubygem-little-pluggerUpgrade rubygem-netrcUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-powerbarUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_azure_rm | Nov 17, 2022 | Apr 19, 2022 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfo | Mar 12, 2024 | Apr 19, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub