Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2011-2186 (GCVE-0-2011-2186)
Vulnerability from cvelistv5
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Show details on NVD website{ "containers": { "cna": { "providerMetadata": { "dateUpdated": "2023-02-12T00:00:00", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "rejectedReasons": [ { "lang": "en", "value": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none." } ] } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2011-2186", "dateRejected": "2023-02-12T00:00:00", "dateReserved": "2011-05-31T00:00:00", "dateUpdated": "2023-02-12T00:00:00", "state": "REJECTED" }, "dataType": "CVE_RECORD", "dataVersion": "5.0", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2011-2186\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2019-10-30T16:15:11.383\",\"lastModified\":\"2023-11-07T02:07:21.710\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.\"}],\"metrics\":{},\"references\":[]}}" } }
gsd-2011-2186
Vulnerability from gsd
{ "GSD": { "alias": "CVE-2011-2186", "description": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.", "id": "GSD-2011-2186", "references": [ "https://www.suse.com/security/cve/CVE-2011-2186.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2011-2186" ], "details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.", "id": "GSD-2011-2186", "modified": "2023-12-13T01:19:07.229428Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2011-2186", "STATE": "REJECT" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none." } ] } } } }
cnvd-2015-05216
Vulnerability from cnvd
Title: Git GitWeb HTML注入漏洞
Description:
Git gitweb是git基于WEB的管理接口。
Git GitWeb存在HTML注入漏洞。由于程序未能正确过滤用户提供的输入,攻击者可以利用漏洞在受影响的浏览器的上下文中运行执行HTML和脚本代码,可能允许攻击者窃取基于cookie的认证证书或控制该网站是如何呈现给用户。
Severity: 中
Patch Name: Git GitWeb HTML注入漏洞的补丁
Patch Description:
Git gitweb是git基于WEB的管理接口。
Git GitWeb存在HTML注入漏洞。由于程序未能正确过滤用户提供的输入,攻击者可以利用漏洞在受影响的浏览器的上下文中运行执行HTML和脚本代码,可能允许攻击者窃取基于cookie的认证证书或控制该网站是如何呈现给用户。目前,厂商已经发布了安全公告及相关补丁信息,修复了此漏洞。
Formal description:
目前厂商已经发布了安全公告及相关升级补丁,修复了此安全问题,请到厂商主页下载: http://git-scm.com/
Reference: http://www.securityfocus.com/bid/76088/
Name | Git GitWeb |
---|
{ "bids": { "bid": { "bidNumber": "76088" } }, "cves": { "cve": { "cveNumber": "CVE-2011-2186" } }, "description": "Git gitweb\u662fgit\u57fa\u4e8eWEB\u7684\u7ba1\u7406\u63a5\u53e3\u3002\r\n\r\nGit GitWeb\u5b58\u5728HTML\u6ce8\u5165\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u8fc7\u6ee4\u7528\u6237\u63d0\u4f9b\u7684\u8f93\u5165\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u6d4f\u89c8\u5668\u7684\u4e0a\u4e0b\u6587\u4e2d\u8fd0\u884c\u6267\u884cHTML\u548c\u811a\u672c\u4ee3\u7801\uff0c\u53ef\u80fd\u5141\u8bb8\u653b\u51fb\u8005\u7a83\u53d6\u57fa\u4e8ecookie\u7684\u8ba4\u8bc1\u8bc1\u4e66\u6216\u63a7\u5236\u8be5\u7f51\u7ad9\u662f\u5982\u4f55\u5448\u73b0\u7ed9\u7528\u6237\u3002", "discovererName": "dave b", "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u5347\u7ea7\u8865\u4e01,\u4fee\u590d\u4e86\u6b64\u5b89\u5168\u95ee\u9898,\u8bf7\u5230\u5382\u5546\u4e3b\u9875\u4e0b\u8f7d:\r\nhttp://git-scm.com/", "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e", "number": "CNVD-2015-05216", "openTime": "2015-08-13", "patchDescription": "Git gitweb\u662fgit\u57fa\u4e8eWEB\u7684\u7ba1\u7406\u63a5\u53e3\u3002 \r\n\r\nGit GitWeb\u5b58\u5728HTML\u6ce8\u5165\u6f0f\u6d1e\u3002\u7531\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u8fc7\u6ee4\u7528\u6237\u63d0\u4f9b\u7684\u8f93\u5165\uff0c\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6f0f\u6d1e\u5728\u53d7\u5f71\u54cd\u7684\u6d4f\u89c8\u5668\u7684\u4e0a\u4e0b\u6587\u4e2d\u8fd0\u884c\u6267\u884cHTML\u548c\u811a\u672c\u4ee3\u7801\uff0c\u53ef\u80fd\u5141\u8bb8\u653b\u51fb\u8005\u7a83\u53d6\u57fa\u4e8ecookie\u7684\u8ba4\u8bc1\u8bc1\u4e66\u6216\u63a7\u5236\u8be5\u7f51\u7ad9\u662f\u5982\u4f55\u5448\u73b0\u7ed9\u7528\u6237\u3002\u76ee\u524d\uff0c\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002", "patchName": "Git GitWeb HTML\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01", "products": { "product": "Git GitWeb" }, "referenceLink": "http://www.securityfocus.com/bid/76088/", "serverity": "\u4e2d", "submitTime": "2015-08-12", "title": "Git GitWeb HTML\u6ce8\u5165\u6f0f\u6d1e" }
fkie_cve-2011-2186
Vulnerability from fkie_nvd
▼ | URL | Tags |
---|
Vendor | Product | Version |
---|
{ "cveTags": [], "descriptions": [ { "lang": "en", "value": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none." } ], "id": "CVE-2011-2186", "lastModified": "2023-11-07T02:07:21.710", "metrics": {}, "published": "2019-10-30T16:15:11.383", "references": [], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Rejected" }
opensuse-su-2024:10099-1
Vulnerability from csaf_opensuse
Notes
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "git-2.11.0-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the git-2.11.0-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-10099", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10099-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2011-2186 page", "url": "https://www.suse.com/security/cve/CVE-2011-2186/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-9390 page", "url": "https://www.suse.com/security/cve/CVE-2014-9390/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2315 page", "url": "https://www.suse.com/security/cve/CVE-2016-2315/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2324 page", "url": "https://www.suse.com/security/cve/CVE-2016-2324/" } ], "title": "git-2.11.0-1.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:10099-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "git-2.11.0-1.1.aarch64", "product": { "name": "git-2.11.0-1.1.aarch64", "product_id": "git-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-arch-2.11.0-1.1.aarch64", "product": { "name": "git-arch-2.11.0-1.1.aarch64", "product_id": "git-arch-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-core-2.11.0-1.1.aarch64", "product": { "name": "git-core-2.11.0-1.1.aarch64", "product_id": "git-core-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-credential-gnome-keyring-2.11.0-1.1.aarch64", "product": { "name": "git-credential-gnome-keyring-2.11.0-1.1.aarch64", "product_id": "git-credential-gnome-keyring-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-cvs-2.11.0-1.1.aarch64", "product": { "name": "git-cvs-2.11.0-1.1.aarch64", "product_id": "git-cvs-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-daemon-2.11.0-1.1.aarch64", "product": { "name": "git-daemon-2.11.0-1.1.aarch64", "product_id": "git-daemon-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-doc-2.11.0-1.1.aarch64", "product": { "name": "git-doc-2.11.0-1.1.aarch64", "product_id": "git-doc-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-email-2.11.0-1.1.aarch64", "product": { "name": "git-email-2.11.0-1.1.aarch64", "product_id": "git-email-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-gui-2.11.0-1.1.aarch64", "product": { "name": "git-gui-2.11.0-1.1.aarch64", "product_id": "git-gui-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-svn-2.11.0-1.1.aarch64", "product": { "name": "git-svn-2.11.0-1.1.aarch64", "product_id": "git-svn-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "git-web-2.11.0-1.1.aarch64", "product": { "name": "git-web-2.11.0-1.1.aarch64", "product_id": "git-web-2.11.0-1.1.aarch64" } }, { "category": "product_version", "name": "gitk-2.11.0-1.1.aarch64", "product": { "name": "gitk-2.11.0-1.1.aarch64", "product_id": "gitk-2.11.0-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "git-2.11.0-1.1.ppc64le", "product": { "name": "git-2.11.0-1.1.ppc64le", "product_id": "git-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-arch-2.11.0-1.1.ppc64le", "product": { "name": "git-arch-2.11.0-1.1.ppc64le", "product_id": "git-arch-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-core-2.11.0-1.1.ppc64le", "product": { "name": "git-core-2.11.0-1.1.ppc64le", "product_id": "git-core-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "product": { "name": "git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "product_id": "git-credential-gnome-keyring-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-cvs-2.11.0-1.1.ppc64le", "product": { "name": "git-cvs-2.11.0-1.1.ppc64le", "product_id": "git-cvs-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-daemon-2.11.0-1.1.ppc64le", "product": { "name": "git-daemon-2.11.0-1.1.ppc64le", "product_id": "git-daemon-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-doc-2.11.0-1.1.ppc64le", "product": { "name": "git-doc-2.11.0-1.1.ppc64le", "product_id": "git-doc-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-email-2.11.0-1.1.ppc64le", "product": { "name": "git-email-2.11.0-1.1.ppc64le", "product_id": "git-email-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-gui-2.11.0-1.1.ppc64le", "product": { "name": "git-gui-2.11.0-1.1.ppc64le", "product_id": "git-gui-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-svn-2.11.0-1.1.ppc64le", "product": { "name": "git-svn-2.11.0-1.1.ppc64le", "product_id": "git-svn-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "git-web-2.11.0-1.1.ppc64le", "product": { "name": "git-web-2.11.0-1.1.ppc64le", "product_id": "git-web-2.11.0-1.1.ppc64le" } }, { "category": "product_version", "name": "gitk-2.11.0-1.1.ppc64le", "product": { "name": "gitk-2.11.0-1.1.ppc64le", "product_id": "gitk-2.11.0-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "git-2.11.0-1.1.s390x", "product": { "name": "git-2.11.0-1.1.s390x", "product_id": "git-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-arch-2.11.0-1.1.s390x", "product": { "name": "git-arch-2.11.0-1.1.s390x", "product_id": "git-arch-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-core-2.11.0-1.1.s390x", "product": { "name": "git-core-2.11.0-1.1.s390x", "product_id": "git-core-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-credential-gnome-keyring-2.11.0-1.1.s390x", "product": { "name": "git-credential-gnome-keyring-2.11.0-1.1.s390x", "product_id": "git-credential-gnome-keyring-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-cvs-2.11.0-1.1.s390x", "product": { "name": "git-cvs-2.11.0-1.1.s390x", "product_id": "git-cvs-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-daemon-2.11.0-1.1.s390x", "product": { "name": "git-daemon-2.11.0-1.1.s390x", "product_id": "git-daemon-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-doc-2.11.0-1.1.s390x", "product": { "name": "git-doc-2.11.0-1.1.s390x", "product_id": "git-doc-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-email-2.11.0-1.1.s390x", "product": { "name": "git-email-2.11.0-1.1.s390x", "product_id": "git-email-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-gui-2.11.0-1.1.s390x", "product": { "name": "git-gui-2.11.0-1.1.s390x", "product_id": "git-gui-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-svn-2.11.0-1.1.s390x", "product": { "name": "git-svn-2.11.0-1.1.s390x", "product_id": "git-svn-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "git-web-2.11.0-1.1.s390x", "product": { "name": "git-web-2.11.0-1.1.s390x", "product_id": "git-web-2.11.0-1.1.s390x" } }, { "category": "product_version", "name": "gitk-2.11.0-1.1.s390x", "product": { "name": "gitk-2.11.0-1.1.s390x", "product_id": "gitk-2.11.0-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "git-2.11.0-1.1.x86_64", "product": { "name": "git-2.11.0-1.1.x86_64", "product_id": "git-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-arch-2.11.0-1.1.x86_64", "product": { "name": "git-arch-2.11.0-1.1.x86_64", "product_id": "git-arch-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-core-2.11.0-1.1.x86_64", "product": { "name": "git-core-2.11.0-1.1.x86_64", "product_id": "git-core-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-credential-gnome-keyring-2.11.0-1.1.x86_64", "product": { "name": "git-credential-gnome-keyring-2.11.0-1.1.x86_64", "product_id": "git-credential-gnome-keyring-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-cvs-2.11.0-1.1.x86_64", "product": { "name": "git-cvs-2.11.0-1.1.x86_64", "product_id": "git-cvs-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-daemon-2.11.0-1.1.x86_64", "product": { "name": "git-daemon-2.11.0-1.1.x86_64", "product_id": "git-daemon-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-doc-2.11.0-1.1.x86_64", "product": { "name": "git-doc-2.11.0-1.1.x86_64", "product_id": "git-doc-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-email-2.11.0-1.1.x86_64", "product": { "name": "git-email-2.11.0-1.1.x86_64", "product_id": "git-email-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-gui-2.11.0-1.1.x86_64", "product": { "name": "git-gui-2.11.0-1.1.x86_64", "product_id": "git-gui-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-svn-2.11.0-1.1.x86_64", "product": { "name": "git-svn-2.11.0-1.1.x86_64", "product_id": "git-svn-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "git-web-2.11.0-1.1.x86_64", "product": { "name": "git-web-2.11.0-1.1.x86_64", "product_id": "git-web-2.11.0-1.1.x86_64" } }, { "category": "product_version", "name": "gitk-2.11.0-1.1.x86_64", "product": { "name": "gitk-2.11.0-1.1.x86_64", "product_id": "gitk-2.11.0-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "git-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64" }, "product_reference": "git-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le" }, "product_reference": "git-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-2.11.0-1.1.s390x" }, "product_reference": "git-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64" }, "product_reference": "git-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-arch-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64" }, "product_reference": "git-arch-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-arch-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le" }, "product_reference": "git-arch-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-arch-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x" }, "product_reference": "git-arch-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-arch-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64" }, "product_reference": "git-arch-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64" }, "product_reference": "git-core-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le" }, "product_reference": "git-core-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x" }, "product_reference": "git-core-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64" }, "product_reference": "git-core-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-gnome-keyring-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64" }, "product_reference": "git-credential-gnome-keyring-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-gnome-keyring-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le" }, "product_reference": "git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-gnome-keyring-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x" }, "product_reference": "git-credential-gnome-keyring-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-gnome-keyring-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64" }, "product_reference": "git-credential-gnome-keyring-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64" }, "product_reference": "git-cvs-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le" }, "product_reference": "git-cvs-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x" }, "product_reference": "git-cvs-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64" }, "product_reference": "git-cvs-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64" }, "product_reference": "git-daemon-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le" }, "product_reference": "git-daemon-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x" }, "product_reference": "git-daemon-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64" }, "product_reference": "git-daemon-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-doc-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64" }, "product_reference": "git-doc-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-doc-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le" }, "product_reference": "git-doc-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-doc-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x" }, "product_reference": "git-doc-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-doc-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64" }, "product_reference": "git-doc-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64" }, "product_reference": "git-email-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le" }, "product_reference": "git-email-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x" }, "product_reference": "git-email-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64" }, "product_reference": "git-email-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64" }, "product_reference": "git-gui-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le" }, "product_reference": "git-gui-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x" }, "product_reference": "git-gui-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64" }, "product_reference": "git-gui-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64" }, "product_reference": "git-svn-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le" }, "product_reference": "git-svn-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x" }, "product_reference": "git-svn-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64" }, "product_reference": "git-svn-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-web-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64" }, "product_reference": "git-web-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-web-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le" }, "product_reference": "git-web-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-web-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x" }, "product_reference": "git-web-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "git-web-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64" }, "product_reference": "git-web-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-2.11.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64" }, "product_reference": "gitk-2.11.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-2.11.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le" }, "product_reference": "gitk-2.11.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-2.11.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x" }, "product_reference": "gitk-2.11.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-2.11.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" }, "product_reference": "gitk-2.11.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2011-2186", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-2186" } ], "notes": [ { "category": "general", "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2011-2186", "url": "https://www.suse.com/security/cve/CVE-2011-2186" }, { "category": "external", "summary": "SUSE Bug 698456 for CVE-2011-2186", "url": "https://bugzilla.suse.com/698456" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2011-2186" }, { "cve": "CVE-2014-9390", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-9390" } ], "notes": [ { "category": "general", "text": "Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-9390", "url": "https://www.suse.com/security/cve/CVE-2014-9390" }, { "category": "external", "summary": "SUSE Bug 910756 for CVE-2014-9390", "url": "https://bugzilla.suse.com/910756" }, { "category": "external", "summary": "SUSE Bug 925040 for CVE-2014-9390", "url": "https://bugzilla.suse.com/925040" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "critical" } ], "title": "CVE-2014-9390" }, { "cve": "CVE-2016-2315", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-2315" } ], "notes": [ { "category": "general", "text": "revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-2315", "url": "https://www.suse.com/security/cve/CVE-2016-2315" }, { "category": "external", "summary": "SUSE Bug 971328 for CVE-2016-2315", "url": "https://bugzilla.suse.com/971328" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-2315" }, { "cve": "CVE-2016-2324", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2016-2324" } ], "notes": [ { "category": "general", "text": "Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2016-2324", "url": "https://www.suse.com/security/cve/CVE-2016-2324" }, { "category": "external", "summary": "SUSE Bug 971328 for CVE-2016-2324", "url": "https://bugzilla.suse.com/971328" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:git-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-arch-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-core-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-core-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-core-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-credential-gnome-keyring-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-cvs-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-daemon-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-doc-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-email-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-email-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-email-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-gui-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-svn-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:git-web-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:git-web-2.11.0-1.1.s390x", "openSUSE Tumbleweed:git-web-2.11.0-1.1.x86_64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.aarch64", "openSUSE Tumbleweed:gitk-2.11.0-1.1.ppc64le", "openSUSE Tumbleweed:gitk-2.11.0-1.1.s390x", "openSUSE Tumbleweed:gitk-2.11.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2016-2324" } ] }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.