Action not permitted
Modal body text goes here.
CVE-2023-29007
Vulnerability from cvelistv5
Published
2023-04-25 20:09
Modified
2024-08-02 14:00
Severity ?
EPSS score ?
Summary
Arbitrary configuration injection via `git submodule deinit`
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T14:00:14.413Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844" }, { "name": "https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4", "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4" }, { "name": "https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt", "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt" }, { "tags": [ "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/" }, { "tags": [ "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/" }, { "tags": [ "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/" }, { "tags": [ "x_transferred" ], "url": "https://security.gentoo.org/glsa/202312-15" }, { "tags": [ "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "git", "vendor": "git", "versions": [ { "status": "affected", "version": "\u003c 2.30.9" }, { "status": "affected", "version": "\u003e= 2.31.0, \u003c 2.31.8" }, { "status": "affected", "version": "\u003e= 2.32.0, \u003c 2.32.7" }, { "status": "affected", "version": "\u003e= 2.33.0, \u003c 2.33.8" }, { "status": "affected", "version": "\u003e= 2.34.0, \u003c 2.34.8" }, { "status": "affected", "version": "\u003e= 2.35.0, \u003c 2.35.8" }, { "status": "affected", "version": "\u003e= 2.36.0, \u003c 2.36.6" }, { "status": "affected", "version": "\u003e= 2.37.0, \u003c 2.37.7" }, { "status": "affected", "version": "\u003e= 2.38.0, \u003c 2.38.5" }, { "status": "affected", "version": "\u003e= 2.39.0, \u003c 2.39.3" }, { "status": "affected", "version": "\u003e= 2.40.0, \u003c 2.40.1" } ] } ], "descriptions": [ { "lang": "en", "value": "Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user\u0027s `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-74", "description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2023-04-25T20:09:52.182Z", "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M" }, "references": [ { "name": "https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844", "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844" }, { "name": "https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4" }, { "name": "https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt", "tags": [ "x_refsource_MISC" ], "url": "https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/" }, { "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/" }, { "url": "https://security.gentoo.org/glsa/202312-15" }, { "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html" } ], "source": { "advisory": "GHSA-v48j-4xgg-4844", "discovery": "UNKNOWN" }, "title": "Arbitrary configuration injection via `git submodule deinit`" } }, "cveMetadata": { "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "assignerShortName": "GitHub_M", "cveId": "CVE-2023-29007", "datePublished": "2023-04-25T20:09:52.182Z", "dateReserved": "2023-03-29T17:39:16.142Z", "dateUpdated": "2024-08-02T14:00:14.413Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2023-29007\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2023-04-25T21:15:10.403\",\"lastModified\":\"2024-06-26T10:15:11.693\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user\u0027s `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`.\"},{\"lang\":\"es\",\"value\":\"Git es un sistema de control de revisiones. Antes de las versiones 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3 y 2.40.1, una versi\u00f3n especialmente El archivo `.gitmodules` elaborado con URL de subm\u00f3dulo que tienen m\u00e1s de 1024 caracteres se puede usar para explotar un error en `config.c::git_config_copy_or_rename_section_in_file()`. Este error se puede utilizar para inyectar una configuraci\u00f3n arbitraria en `$GIT_DIR/config` de un usuario al intentar eliminar la secci\u00f3n de configuraci\u00f3n asociada con ese subm\u00f3dulo. Cuando el atacante inyecta valores de configuraci\u00f3n que especifican ejecutables para ejecutar (como `core.pager`, `core.editor`, `core.sshCommand`, etc.), esto puede provocar una ejecuci\u00f3n remota de c\u00f3digo. Una soluci\u00f3n hay una soluci\u00f3n disponible en las versiones 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3 y 2.40. .1. Como workaround, evite ejecutar `git submodule deinit` en repositorios que no sean de confianza o sin una inspecci\u00f3n previa de cualquier secci\u00f3n de subm\u00f3dulo en `$GIT_DIR/config`.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseScore\":7.0,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":1.0,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-74\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.30.9\",\"matchCriteriaId\":\"A2E4BF99-17B8-4424-B97E-DDB8A4793DAF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.31.0\",\"versionEndExcluding\":\"2.31.8\",\"matchCriteriaId\":\"2A1D7F29-E06F-4277-8713-1C19DE714300\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.32.0\",\"versionEndExcluding\":\"2.32.7\",\"matchCriteriaId\":\"0B69F022-B29E-4D9A-B4FC-78430AFF0C9C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.33.0\",\"versionEndExcluding\":\"2.33.8\",\"matchCriteriaId\":\"8A2B603F-B8E2-4123-80A4-64E983FF1F86\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.34.0\",\"versionEndExcluding\":\"2.34.8\",\"matchCriteriaId\":\"26D3ED4E-246E-4D4D-9E2D-7890E93ECED8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.35.0\",\"versionEndExcluding\":\"2.35.8\",\"matchCriteriaId\":\"D3988013-1332-49F8-85E7-7EB59BE36A63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.36.0\",\"versionEndExcluding\":\"2.36.5\",\"matchCriteriaId\":\"0588D372-41D2-442E-976E-6B24DB1A1EC6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.37.0\",\"versionEndExcluding\":\"2.37.7\",\"matchCriteriaId\":\"030542CA-76BF-4252-9E03-D7E44D3DEE19\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.38.0\",\"versionEndExcluding\":\"2.38.5\",\"matchCriteriaId\":\"6EAEE109-8AD8-4383-AAC3-E9D2A4794F8B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.39.0\",\"versionEndExcluding\":\"2.39.3\",\"matchCriteriaId\":\"BE329F8E-076F-4895-A2A2-A1C0330C1F6F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:git-scm:git:2.40.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"89633B46-319A-499C-9848-2EA60AC030EB\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E30D0E6F-4AE8-4284-8716-991DFA48CC5D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9\"}]}]}],\"references\":[{\"url\":\"https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2024/06/msg00018.html\",\"source\":\"security-advisories@github.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202312-15\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
rhsa-2023_3280
Vulnerability from csaf_redhat
Published
2023-05-23 14:47
Modified
2024-11-06 03:04
Summary
Red Hat Security Advisory: rh-git227-git security update
Notes
Topic
An update for rh-git227-git is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for rh-git227-git is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.\n\nSecurity Fix(es):\n\n* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)\n\n* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)\n\n* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:3280", "url": "https://access.redhat.com/errata/RHSA-2023:3280" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3280.json" } ], "title": "Red Hat Security Advisory: rh-git227-git security update", "tracking": { "current_release_date": "2024-11-06T03:04:58+00:00", "generator": { "date": "2024-11-06T03:04:58+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2023:3280", "initial_release_date": "2023-05-23T14:47:02+00:00", "revision_history": [ { "date": "2023-05-23T14:47:02+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-05-23T14:47:02+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T03:04:58+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for RHEL Workstation(v. 7)", "product": { "name": "Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for RHEL(v. 7)", "product": { "name": "Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "rh-git227-git-0:2.27.0-6.el7.src", "product": { "name": "rh-git227-git-0:2.27.0-6.el7.src", "product_id": "rh-git227-git-0:2.27.0-6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git@2.27.0-6.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rh-git227-git-0:2.27.0-6.el7.x86_64", "product": { "name": "rh-git227-git-0:2.27.0-6.el7.x86_64", "product_id": "rh-git227-git-0:2.27.0-6.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git@2.27.0-6.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-git227-git-core-0:2.27.0-6.el7.x86_64", "product": { "name": "rh-git227-git-core-0:2.27.0-6.el7.x86_64", "product_id": "rh-git227-git-core-0:2.27.0-6.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-core@2.27.0-6.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "product": { "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "product_id": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-credential-libsecret@2.27.0-6.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "product": { "name": "rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "product_id": "rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-daemon@2.27.0-6.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "product": { "name": "rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "product_id": "rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-subtree@2.27.0-6.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "product": { "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "product_id": "rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-debuginfo@2.27.0-6.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "rh-git227-git-all-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-git-all-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-git-all-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-all@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-core-doc@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-cvs@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-git-email-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-git-email-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-git-email-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-email@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-git-gui-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-git-gui-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-git-gui-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-gui@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-instaweb@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-git-p4-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-git-p4-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-git-p4-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-p4@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-git-svn-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-git-svn-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-git-svn-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-svn@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-gitk-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-gitk-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-gitk-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-gitk@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-gitweb-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-gitweb-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-gitweb-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-gitweb@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-perl-Git@2.27.0-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "product": { "name": "rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "product_id": "rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-perl-Git-SVN@2.27.0-6.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "rh-git227-git-0:2.27.0-6.el7.s390x", "product": { "name": "rh-git227-git-0:2.27.0-6.el7.s390x", "product_id": "rh-git227-git-0:2.27.0-6.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git@2.27.0-6.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-git227-git-core-0:2.27.0-6.el7.s390x", "product": { "name": "rh-git227-git-core-0:2.27.0-6.el7.s390x", "product_id": "rh-git227-git-core-0:2.27.0-6.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-core@2.27.0-6.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "product": { "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "product_id": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-credential-libsecret@2.27.0-6.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "product": { "name": "rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "product_id": "rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-daemon@2.27.0-6.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "product": { "name": "rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "product_id": "rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-subtree@2.27.0-6.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "product": { "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "product_id": "rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-debuginfo@2.27.0-6.el7?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "rh-git227-git-0:2.27.0-6.el7.ppc64le", "product": { "name": "rh-git227-git-0:2.27.0-6.el7.ppc64le", "product_id": "rh-git227-git-0:2.27.0-6.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git@2.27.0-6.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "product": { "name": "rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "product_id": "rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-core@2.27.0-6.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "product": { "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "product_id": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-credential-libsecret@2.27.0-6.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "product": { "name": "rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "product_id": "rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-daemon@2.27.0-6.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "product": { "name": "rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "product_id": "rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-subtree@2.27.0-6.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "product": { "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "product_id": "rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-git227-git-debuginfo@2.27.0-6.el7?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-0:2.27.0-6.el7.src as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src" }, "product_reference": "rh-git227-git-0:2.27.0-6.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-all-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-all-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-core-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-core-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-core-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-core-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-core-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-core-doc-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-cvs-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-daemon-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-daemon-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-email-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-email-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-gui-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-gui-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-instaweb-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-p4-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-p4-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-subtree-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-subtree-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-svn-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-svn-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-gitk-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-gitk-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-gitweb-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-gitweb-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-perl-Git-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)", "product_id": "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-0:2.27.0-6.el7.src as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src" }, "product_reference": "rh-git227-git-0:2.27.0-6.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-all-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-all-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-core-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-core-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-core-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-core-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-core-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-core-doc-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-cvs-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-daemon-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-daemon-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-email-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-email-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-gui-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-gui-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-instaweb-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-p4-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-p4-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le" }, "product_reference": "rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-subtree-0:2.27.0-6.el7.s390x as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x" }, "product_reference": "rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-subtree-0:2.27.0-6.el7.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64" }, "product_reference": "rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-git-svn-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-git-svn-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-gitk-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-gitk-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-gitweb-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-gitweb-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-perl-Git-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" }, { "category": "default_component_of", "full_product_name": { "name": "rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch as a component of Red Hat Software Collections for RHEL(v. 7)", "product_id": "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" }, "product_reference": "rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.8" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-25652", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188333" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25652" }, { "category": "external", "summary": "RHBZ#2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25652", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25652" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-23T14:47:02+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3280" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents" }, { "cve": "CVE-2023-25815", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188337" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the malicious placement of crafted messages.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: malicious placement of crafted messages when git was compiled with runtime prefix", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25815" }, { "category": "external", "summary": "RHBZ#2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25815", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-23T14:47:02+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3280" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "git: malicious placement of crafted messages when git was compiled with runtime prefix" }, { "cve": "CVE-2023-29007", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188338" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a configuration file, where certain malicious configuration values may be misinterpreted as the beginning of a new configuration section. This flaw leads to arbitrary configuration injection.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-29007" }, { "category": "external", "summary": "RHBZ#2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29007", "url": "https://www.cve.org/CVERecord?id=CVE-2023-29007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-23T14:47:02+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3280" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Server-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Server-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Server-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Server-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.src", "7Workstation-RHSCL-3.8:rh-git227-git-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-all-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-core-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-core-doc-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-credential-libsecret-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-cvs-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-daemon-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-debuginfo-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-email-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-gui-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-instaweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-p4-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.ppc64le", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.s390x", "7Workstation-RHSCL-3.8:rh-git227-git-subtree-0:2.27.0-6.el7.x86_64", "7Workstation-RHSCL-3.8:rh-git227-git-svn-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitk-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-gitweb-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-0:2.27.0-6.el7.noarch", "7Workstation-RHSCL-3.8:rh-git227-perl-Git-SVN-0:2.27.0-6.el7.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file" } ] }
rhsa-2023_3192
Vulnerability from csaf_redhat
Published
2023-05-17 15:23
Modified
2024-11-06 03:02
Summary
Red Hat Security Advisory: git security update
Notes
Topic
An update for git is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for git is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.\n\nSecurity Fix(es):\n\n* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)\n\n* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)\n\n* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:3192", "url": "https://access.redhat.com/errata/RHSA-2023:3192" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3192.json" } ], "title": "Red Hat Security Advisory: git security update", "tracking": { "current_release_date": "2024-11-06T03:02:21+00:00", "generator": { "date": "2024-11-06T03:02:21+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2023:3192", "initial_release_date": "2023-05-17T15:23:52+00:00", "revision_history": [ { "date": "2023-05-17T15:23:52+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-05-17T15:23:52+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T03:02:21+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product": { "name": "Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_e4s:8.1::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "git-0:2.18.4-3.el8_1.src", "product": { "name": "git-0:2.18.4-3.el8_1.src", "product_id": "git-0:2.18.4-3.el8_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.18.4-3.el8_1?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "git-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-core-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-core-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-daemon-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-daemon-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-instaweb-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-instaweb-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-instaweb-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-instaweb@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-subtree-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-subtree-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-subtree-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-svn-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-svn-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-svn-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debugsource-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-debugsource-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-debugsource-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.18.4-3.el8_1?arch=ppc64le" } } }, { "category": "product_version", "name": "git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product": { "name": "git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product_id": "git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn-debuginfo@2.18.4-3.el8_1?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "git-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-0:2.18.4-3.el8_1.x86_64", "product_id": "git-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-core-0:2.18.4-3.el8_1.x86_64", "product_id": "git-core-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-daemon-0:2.18.4-3.el8_1.x86_64", "product_id": "git-daemon-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-instaweb-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-instaweb-0:2.18.4-3.el8_1.x86_64", "product_id": "git-instaweb-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-instaweb@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-subtree-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-subtree-0:2.18.4-3.el8_1.x86_64", "product_id": "git-subtree-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-svn-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-svn-0:2.18.4-3.el8_1.x86_64", "product_id": "git-svn-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-debugsource-0:2.18.4-3.el8_1.x86_64", "product_id": "git-debugsource-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "product_id": "git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "product_id": "git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-debuginfo-0:2.18.4-3.el8_1.x86_64", "product_id": "git-debuginfo-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.18.4-3.el8_1?arch=x86_64" } } }, { "category": "product_version", "name": "git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "product": { "name": "git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "product_id": "git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn-debuginfo@2.18.4-3.el8_1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "git-all-0:2.18.4-3.el8_1.noarch", "product": { "name": "git-all-0:2.18.4-3.el8_1.noarch", "product_id": "git-all-0:2.18.4-3.el8_1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-all@2.18.4-3.el8_1?arch=noarch" } } }, { "category": "product_version", "name": "git-core-doc-0:2.18.4-3.el8_1.noarch", "product": { "name": "git-core-doc-0:2.18.4-3.el8_1.noarch", "product_id": "git-core-doc-0:2.18.4-3.el8_1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-doc@2.18.4-3.el8_1?arch=noarch" } } }, { "category": "product_version", "name": "git-email-0:2.18.4-3.el8_1.noarch", "product": { "name": "git-email-0:2.18.4-3.el8_1.noarch", "product_id": "git-email-0:2.18.4-3.el8_1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-email@2.18.4-3.el8_1?arch=noarch" } } }, { "category": "product_version", "name": "git-gui-0:2.18.4-3.el8_1.noarch", "product": { "name": "git-gui-0:2.18.4-3.el8_1.noarch", "product_id": "git-gui-0:2.18.4-3.el8_1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gui@2.18.4-3.el8_1?arch=noarch" } } }, { "category": "product_version", "name": "gitk-0:2.18.4-3.el8_1.noarch", "product": { "name": "gitk-0:2.18.4-3.el8_1.noarch", "product_id": "gitk-0:2.18.4-3.el8_1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitk@2.18.4-3.el8_1?arch=noarch" } } }, { "category": "product_version", "name": "gitweb-0:2.18.4-3.el8_1.noarch", "product": { "name": "gitweb-0:2.18.4-3.el8_1.noarch", "product_id": "gitweb-0:2.18.4-3.el8_1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitweb@2.18.4-3.el8_1?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-0:2.18.4-3.el8_1.noarch", "product": { "name": "perl-Git-0:2.18.4-3.el8_1.noarch", "product_id": "perl-Git-0:2.18.4-3.el8_1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git@2.18.4-3.el8_1?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-SVN-0:2.18.4-3.el8_1.noarch", "product": { "name": "perl-Git-SVN-0:2.18.4-3.el8_1.noarch", "product_id": "perl-Git-SVN-0:2.18.4-3.el8_1.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git-SVN@2.18.4-3.el8_1?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "git-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.18.4-3.el8_1.src as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src" }, "product_reference": "git-0:2.18.4-3.el8_1.src", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:2.18.4-3.el8_1.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch" }, "product_reference": "git-all-0:2.18.4-3.el8_1.noarch", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-core-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-core-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-doc-0:2.18.4-3.el8_1.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch" }, "product_reference": "git-core-doc-0:2.18.4-3.el8_1.noarch", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-daemon-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-daemon-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-debuginfo-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-debugsource-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-debugsource-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:2.18.4-3.el8_1.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch" }, "product_reference": "git-email-0:2.18.4-3.el8_1.noarch", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:2.18.4-3.el8_1.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch" }, "product_reference": "git-gui-0:2.18.4-3.el8_1.noarch", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-instaweb-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-instaweb-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-subtree-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-subtree-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-svn-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-svn-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le" }, "product_reference": "git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64" }, "product_reference": "git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:2.18.4-3.el8_1.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch" }, "product_reference": "gitk-0:2.18.4-3.el8_1.noarch", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:2.18.4-3.el8_1.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch" }, "product_reference": "gitweb-0:2.18.4-3.el8_1.noarch", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:2.18.4-3.el8_1.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch" }, "product_reference": "perl-Git-0:2.18.4-3.el8_1.noarch", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:2.18.4-3.el8_1.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v. 8.1)", "product_id": "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" }, "product_reference": "perl-Git-SVN-0:2.18.4-3.el8_1.noarch", "relates_to_product_reference": "AppStream-8.1.0.Z.E4S" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-25652", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188333" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25652" }, { "category": "external", "summary": "RHBZ#2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25652", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25652" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-17T15:23:52+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3192" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents" }, { "cve": "CVE-2023-25815", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188337" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the malicious placement of crafted messages.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: malicious placement of crafted messages when git was compiled with runtime prefix", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25815" }, { "category": "external", "summary": "RHBZ#2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25815", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-17T15:23:52+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3192" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "git: malicious placement of crafted messages when git was compiled with runtime prefix" }, { "cve": "CVE-2023-29007", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188338" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a configuration file, where certain malicious configuration values may be misinterpreted as the beginning of a new configuration section. This flaw leads to arbitrary configuration injection.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-29007" }, { "category": "external", "summary": "RHBZ#2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29007", "url": "https://www.cve.org/CVERecord?id=CVE-2023-29007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-17T15:23:52+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3192" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.src", "AppStream-8.1.0.Z.E4S:git-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-all-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-core-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-core-doc-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-daemon-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-debugsource-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-email-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-gui-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-instaweb-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-subtree-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.ppc64le", "AppStream-8.1.0.Z.E4S:git-svn-debuginfo-0:2.18.4-3.el8_1.x86_64", "AppStream-8.1.0.Z.E4S:gitk-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:gitweb-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-0:2.18.4-3.el8_1.noarch", "AppStream-8.1.0.Z.E4S:perl-Git-SVN-0:2.18.4-3.el8_1.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file" } ] }
rhsa-2023_3245
Vulnerability from csaf_redhat
Published
2023-05-22 07:08
Modified
2024-11-06 03:03
Summary
Red Hat Security Advisory: git security update
Notes
Topic
An update for git is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: data exfiltration with maliciously crafted repository (CVE-2023-22490)
* git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for git is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.\n\nSecurity Fix(es):\n\n* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)\n\n* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)\n\n* git: data exfiltration with maliciously crafted repository (CVE-2023-22490)\n\n* git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)\n\n* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:3245", "url": "https://access.redhat.com/errata/RHSA-2023:3245" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2168160", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2168160" }, { "category": "external", "summary": "2168161", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2168161" }, { "category": "external", "summary": "2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3245.json" } ], "title": "Red Hat Security Advisory: git security update", "tracking": { "current_release_date": "2024-11-06T03:03:33+00:00", "generator": { "date": "2024-11-06T03:03:33+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2023:3245", "initial_release_date": "2023-05-22T07:08:06+00:00", "revision_history": [ { "date": "2023-05-22T07:08:06+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-05-22T07:08:06+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T03:03:33+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el9_2.src", "product": { "name": "git-0:2.39.3-1.el9_2.src", "product_id": "git-0:2.39.3-1.el9_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el9_2?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-0:2.39.3-1.el9_2.aarch64", "product_id": "git-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el9_2?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-core-0:2.39.3-1.el9_2.aarch64", "product_id": "git-core-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.39.3-1.el9_2?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "product_id": "git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.39.3-1.el9_2?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-daemon-0:2.39.3-1.el9_2.aarch64", "product_id": "git-daemon-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.39.3-1.el9_2?arch=aarch64" } } }, { "category": "product_version", "name": "git-subtree-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-subtree-0:2.39.3-1.el9_2.aarch64", "product_id": "git-subtree-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.39.3-1.el9_2?arch=aarch64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-debugsource-0:2.39.3-1.el9_2.aarch64", "product_id": "git-debugsource-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.39.3-1.el9_2?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "product_id": "git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.39.3-1.el9_2?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "product_id": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.39.3-1.el9_2?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "product_id": "git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.39.3-1.el9_2?arch=aarch64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.39.3-1.el9_2.aarch64", "product": { "name": "git-debuginfo-0:2.39.3-1.el9_2.aarch64", "product_id": "git-debuginfo-0:2.39.3-1.el9_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.39.3-1.el9_2?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el9_2?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-core-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-core-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.39.3-1.el9_2?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.39.3-1.el9_2?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-daemon-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-daemon-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.39.3-1.el9_2?arch=ppc64le" } } }, { "category": "product_version", "name": "git-subtree-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-subtree-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-subtree-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.39.3-1.el9_2?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debugsource-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-debugsource-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-debugsource-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.39.3-1.el9_2?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.39.3-1.el9_2?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.39.3-1.el9_2?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.39.3-1.el9_2?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product": { "name": "git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product_id": "git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.39.3-1.el9_2?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-0:2.39.3-1.el9_2.x86_64", "product_id": "git-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el9_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-core-0:2.39.3-1.el9_2.x86_64", "product_id": "git-core-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.39.3-1.el9_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "product_id": "git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.39.3-1.el9_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-daemon-0:2.39.3-1.el9_2.x86_64", "product_id": "git-daemon-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.39.3-1.el9_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-subtree-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-subtree-0:2.39.3-1.el9_2.x86_64", "product_id": "git-subtree-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.39.3-1.el9_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-debugsource-0:2.39.3-1.el9_2.x86_64", "product_id": "git-debugsource-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.39.3-1.el9_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "product_id": "git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.39.3-1.el9_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "product_id": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.39.3-1.el9_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "product_id": "git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.39.3-1.el9_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.39.3-1.el9_2.x86_64", "product": { "name": "git-debuginfo-0:2.39.3-1.el9_2.x86_64", "product_id": "git-debuginfo-0:2.39.3-1.el9_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.39.3-1.el9_2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-0:2.39.3-1.el9_2.s390x", "product_id": "git-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el9_2?arch=s390x" } } }, { "category": "product_version", "name": "git-core-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-core-0:2.39.3-1.el9_2.s390x", "product_id": "git-core-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.39.3-1.el9_2?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "product_id": "git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.39.3-1.el9_2?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-daemon-0:2.39.3-1.el9_2.s390x", "product_id": "git-daemon-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.39.3-1.el9_2?arch=s390x" } } }, { "category": "product_version", "name": "git-subtree-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-subtree-0:2.39.3-1.el9_2.s390x", "product_id": "git-subtree-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.39.3-1.el9_2?arch=s390x" } } }, { "category": "product_version", "name": "git-debugsource-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-debugsource-0:2.39.3-1.el9_2.s390x", "product_id": "git-debugsource-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.39.3-1.el9_2?arch=s390x" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "product_id": "git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.39.3-1.el9_2?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "product_id": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.39.3-1.el9_2?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "product_id": "git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.39.3-1.el9_2?arch=s390x" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.39.3-1.el9_2.s390x", "product": { "name": "git-debuginfo-0:2.39.3-1.el9_2.s390x", "product_id": "git-debuginfo-0:2.39.3-1.el9_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.39.3-1.el9_2?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "git-all-0:2.39.3-1.el9_2.noarch", "product": { "name": "git-all-0:2.39.3-1.el9_2.noarch", "product_id": "git-all-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-all@2.39.3-1.el9_2?arch=noarch" } } }, { "category": "product_version", "name": "git-core-doc-0:2.39.3-1.el9_2.noarch", "product": { "name": "git-core-doc-0:2.39.3-1.el9_2.noarch", "product_id": "git-core-doc-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-doc@2.39.3-1.el9_2?arch=noarch" } } }, { "category": "product_version", "name": "git-email-0:2.39.3-1.el9_2.noarch", "product": { "name": "git-email-0:2.39.3-1.el9_2.noarch", "product_id": "git-email-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-email@2.39.3-1.el9_2?arch=noarch" } } }, { "category": "product_version", "name": "git-gui-0:2.39.3-1.el9_2.noarch", "product": { "name": "git-gui-0:2.39.3-1.el9_2.noarch", "product_id": "git-gui-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gui@2.39.3-1.el9_2?arch=noarch" } } }, { "category": "product_version", "name": "git-instaweb-0:2.39.3-1.el9_2.noarch", "product": { "name": "git-instaweb-0:2.39.3-1.el9_2.noarch", "product_id": "git-instaweb-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-instaweb@2.39.3-1.el9_2?arch=noarch" } } }, { "category": "product_version", "name": "git-svn-0:2.39.3-1.el9_2.noarch", "product": { "name": "git-svn-0:2.39.3-1.el9_2.noarch", "product_id": "git-svn-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@2.39.3-1.el9_2?arch=noarch" } } }, { "category": "product_version", "name": "gitk-0:2.39.3-1.el9_2.noarch", "product": { "name": "gitk-0:2.39.3-1.el9_2.noarch", "product_id": "gitk-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitk@2.39.3-1.el9_2?arch=noarch" } } }, { "category": "product_version", "name": "gitweb-0:2.39.3-1.el9_2.noarch", "product": { "name": "gitweb-0:2.39.3-1.el9_2.noarch", "product_id": "gitweb-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitweb@2.39.3-1.el9_2?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-0:2.39.3-1.el9_2.noarch", "product": { "name": "perl-Git-0:2.39.3-1.el9_2.noarch", "product_id": "perl-Git-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git@2.39.3-1.el9_2?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-SVN-0:2.39.3-1.el9_2.noarch", "product": { "name": "perl-Git-SVN-0:2.39.3-1.el9_2.noarch", "product_id": "perl-Git-SVN-0:2.39.3-1.el9_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git-SVN@2.39.3-1.el9_2?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el9_2.src as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src" }, "product_reference": "git-0:2.39.3-1.el9_2.src", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch" }, "product_reference": "git-all-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-core-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-core-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-core-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-core-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-doc-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch" }, "product_reference": "git-core-doc-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-daemon-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-daemon-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-daemon-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-daemon-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-debuginfo-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-debuginfo-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-debuginfo-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-debugsource-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-debugsource-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-debugsource-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-debugsource-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch" }, "product_reference": "git-email-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch" }, "product_reference": "git-gui-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch" }, "product_reference": "git-instaweb-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.39.3-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64" }, "product_reference": "git-subtree-0:2.39.3-1.el9_2.aarch64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.39.3-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le" }, "product_reference": "git-subtree-0:2.39.3-1.el9_2.ppc64le", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.39.3-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x" }, "product_reference": "git-subtree-0:2.39.3-1.el9_2.s390x", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.39.3-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64" }, "product_reference": "git-subtree-0:2.39.3-1.el9_2.x86_64", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch" }, "product_reference": "git-svn-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch" }, "product_reference": "gitk-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch" }, "product_reference": "gitweb-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch" }, "product_reference": "perl-Git-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:2.39.3-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)", "product_id": "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" }, "product_reference": "perl-Git-SVN-0:2.39.3-1.el9_2.noarch", "relates_to_product_reference": "AppStream-9.2.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-22490", "cwe": { "id": "CWE-402", "name": "Transmission of Private Resources into a New Sphere (\u0027Resource Leak\u0027)" }, "discovery_date": "2023-02-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2168160" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. Using a specially-crafted repository, Git can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort local clones whose source $GIT_DIR/objects directory contains symbolic links (CVE-2022-39253), the objects directory may still be a symbolic link.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: data exfiltration with maliciously crafted repository", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-22490" }, { "category": "external", "summary": "RHBZ#2168160", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2168160" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-22490", "url": "https://www.cve.org/CVERecord?id=CVE-2023-22490" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-22490", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22490" }, { "category": "external", "summary": "https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/", "url": "https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/" }, { "category": "external", "summary": "https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q", "url": "https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q" } ], "release_date": "2023-02-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:08:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3245" }, { "category": "workaround", "details": "- Avoid cloning repositories from untrusted sources with --recurse-submodules.\n- Instead, consider cloning repositories without recursively cloning their submodules, and instead run git submodule update at each layer. Before doing so, inspect each new .gitmodules file to ensure that it does not contain suspicious module URLs.", "product_ids": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "git: data exfiltration with maliciously crafted repository" }, { "cve": "CVE-2023-23946", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2023-02-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2168161" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security issue occurs when feeding a crafted input to \"git apply.\" A path outside the working tree can be overwritten by the user running \"git apply.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "git: git apply: a path outside the working tree can be overwritten with crafted input", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability marked as Moderate severity and it\u0027s less likely to be exploitable because it requires a specially crafted malicious patch to be applied via git apply, to overwrite files outside the working tree of the user running git apply. This could lead to some compromise of integrity of resources under certain circumstances, however it does not compromise the whole system or gain additional privileges to execute arbitrary code, or allow remote users to cause a denial of service.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-23946" }, { "category": "external", "summary": "RHBZ#2168161", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2168161" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-23946", "url": "https://www.cve.org/CVERecord?id=CVE-2023-23946" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-23946", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23946" }, { "category": "external", "summary": "https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/", "url": "https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/" }, { "category": "external", "summary": "https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh", "url": "https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh" } ], "release_date": "2023-02-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:08:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3245" }, { "category": "workaround", "details": "Use git apply --stat to inspect a patch before applying; avoid applying one that creates a symbolic link and then creates a file beyond the symbolic link.", "product_ids": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "git: git apply: a path outside the working tree can be overwritten with crafted input" }, { "cve": "CVE-2023-25652", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188333" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25652" }, { "category": "external", "summary": "RHBZ#2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25652", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25652" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:08:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3245" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents" }, { "cve": "CVE-2023-25815", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188337" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the malicious placement of crafted messages.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: malicious placement of crafted messages when git was compiled with runtime prefix", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25815" }, { "category": "external", "summary": "RHBZ#2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25815", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:08:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3245" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "git: malicious placement of crafted messages when git was compiled with runtime prefix" }, { "cve": "CVE-2023-29007", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188338" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a configuration file, where certain malicious configuration values may be misinterpreted as the beginning of a new configuration section. This flaw leads to arbitrary configuration injection.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-29007" }, { "category": "external", "summary": "RHBZ#2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29007", "url": "https://www.cve.org/CVERecord?id=CVE-2023-29007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:08:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3245" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.src", "AppStream-9.2.0.Z.MAIN.EUS:git-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.aarch64", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.ppc64le", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.s390x", "AppStream-9.2.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el9_2.x86_64", "AppStream-9.2.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el9_2.noarch", "AppStream-9.2.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el9_2.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file" } ] }
rhsa-2023_3263
Vulnerability from csaf_redhat
Published
2023-05-23 09:25
Modified
2024-11-06 03:04
Summary
Red Hat Security Advisory: git security update
Notes
Topic
An update for git is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for git is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.\n\nSecurity Fix(es):\n\n* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)\n\n* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:3263", "url": "https://access.redhat.com/errata/RHSA-2023:3263" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3263.json" } ], "title": "Red Hat Security Advisory: git security update", "tracking": { "current_release_date": "2024-11-06T03:04:48+00:00", "generator": { "date": "2024-11-06T03:04:48+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2023:3263", "initial_release_date": "2023-05-23T09:25:47+00:00", "revision_history": [ { "date": "2023-05-23T09:25:47+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-05-23T09:25:47+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T03:04:48+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "emacs-git-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "emacs-git-0:1.8.3.1-25.el7_9.noarch", "product_id": "emacs-git-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/emacs-git@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "product_id": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/emacs-git-el@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "git-all-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "git-all-0:1.8.3.1-25.el7_9.noarch", "product_id": "git-all-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-all@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "git-bzr-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "git-bzr-0:1.8.3.1-25.el7_9.noarch", "product_id": "git-bzr-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-bzr@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "git-cvs-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "git-cvs-0:1.8.3.1-25.el7_9.noarch", "product_id": "git-cvs-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-cvs@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "git-email-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "git-email-0:1.8.3.1-25.el7_9.noarch", "product_id": "git-email-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-email@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "git-gui-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "git-gui-0:1.8.3.1-25.el7_9.noarch", "product_id": "git-gui-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gui@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "git-hg-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "git-hg-0:1.8.3.1-25.el7_9.noarch", "product_id": "git-hg-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-hg@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "git-instaweb-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "git-instaweb-0:1.8.3.1-25.el7_9.noarch", "product_id": "git-instaweb-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-instaweb@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "git-p4-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "git-p4-0:1.8.3.1-25.el7_9.noarch", "product_id": "git-p4-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-p4@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "gitk-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "gitk-0:1.8.3.1-25.el7_9.noarch", "product_id": "gitk-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitk@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "gitweb-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "gitweb-0:1.8.3.1-25.el7_9.noarch", "product_id": "gitweb-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitweb@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "perl-Git-0:1.8.3.1-25.el7_9.noarch", "product_id": "perl-Git-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git@1.8.3.1-25.el7_9?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "product": { "name": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "product_id": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git-SVN@1.8.3.1-25.el7_9?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "git-0:1.8.3.1-25.el7_9.src", "product": { "name": "git-0:1.8.3.1-25.el7_9.src", "product_id": "git-0:1.8.3.1-25.el7_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@1.8.3.1-25.el7_9?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "git-0:1.8.3.1-25.el7_9.x86_64", "product": { "name": "git-0:1.8.3.1-25.el7_9.x86_64", "product_id": "git-0:1.8.3.1-25.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@1.8.3.1-25.el7_9?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-0:1.8.3.1-25.el7_9.x86_64", "product": { "name": "git-daemon-0:1.8.3.1-25.el7_9.x86_64", "product_id": "git-daemon-0:1.8.3.1-25.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@1.8.3.1-25.el7_9?arch=x86_64" } } }, { "category": "product_version", "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "product": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "product_id": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gnome-keyring@1.8.3.1-25.el7_9?arch=x86_64" } } }, { "category": "product_version", "name": "git-svn-0:1.8.3.1-25.el7_9.x86_64", "product": { "name": "git-svn-0:1.8.3.1-25.el7_9.x86_64", "product_id": "git-svn-0:1.8.3.1-25.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@1.8.3.1-25.el7_9?arch=x86_64" } } }, { "category": "product_version", "name": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "product": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "product_id": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@1.8.3.1-25.el7_9?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "git-0:1.8.3.1-25.el7_9.ppc64le", "product": { "name": "git-0:1.8.3.1-25.el7_9.ppc64le", "product_id": "git-0:1.8.3.1-25.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@1.8.3.1-25.el7_9?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "product": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "product_id": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@1.8.3.1-25.el7_9?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "product": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "product_id": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@1.8.3.1-25.el7_9?arch=ppc64le" } } }, { "category": "product_version", "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "product": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "product_id": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gnome-keyring@1.8.3.1-25.el7_9?arch=ppc64le" } } }, { "category": "product_version", "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64le", "product": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64le", "product_id": "git-svn-0:1.8.3.1-25.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@1.8.3.1-25.el7_9?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "git-0:1.8.3.1-25.el7_9.ppc64", "product": { "name": "git-0:1.8.3.1-25.el7_9.ppc64", "product_id": "git-0:1.8.3.1-25.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@1.8.3.1-25.el7_9?arch=ppc64" } } }, { "category": "product_version", "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "product": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "product_id": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@1.8.3.1-25.el7_9?arch=ppc64" } } }, { "category": "product_version", "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64", "product": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64", "product_id": "git-daemon-0:1.8.3.1-25.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@1.8.3.1-25.el7_9?arch=ppc64" } } }, { "category": "product_version", "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "product": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "product_id": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gnome-keyring@1.8.3.1-25.el7_9?arch=ppc64" } } }, { "category": "product_version", "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64", "product": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64", "product_id": "git-svn-0:1.8.3.1-25.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@1.8.3.1-25.el7_9?arch=ppc64" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "git-0:1.8.3.1-25.el7_9.s390x", "product": { "name": "git-0:1.8.3.1-25.el7_9.s390x", "product_id": "git-0:1.8.3.1-25.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@1.8.3.1-25.el7_9?arch=s390x" } } }, { "category": "product_version", "name": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "product": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "product_id": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@1.8.3.1-25.el7_9?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-0:1.8.3.1-25.el7_9.s390x", "product": { "name": "git-daemon-0:1.8.3.1-25.el7_9.s390x", "product_id": "git-daemon-0:1.8.3.1-25.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@1.8.3.1-25.el7_9?arch=s390x" } } }, { "category": "product_version", "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "product": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "product_id": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gnome-keyring@1.8.3.1-25.el7_9?arch=s390x" } } }, { "category": "product_version", "name": "git-svn-0:1.8.3.1-25.el7_9.s390x", "product": { "name": "git-svn-0:1.8.3.1-25.el7_9.s390x", "product_id": "git-svn-0:1.8.3.1-25.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@1.8.3.1-25.el7_9?arch=s390x" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "emacs-git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src" }, "product_reference": "git-0:1.8.3.1-25.el7_9.src", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-all-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-bzr-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-bzr-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-cvs-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-email-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-gui-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-hg-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-hg-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-instaweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-p4-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-p4-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitk-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src" }, "product_reference": "git-0:1.8.3.1-25.el7_9.src", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-all-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-bzr-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-bzr-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-cvs-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-email-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-gui-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-hg-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-hg-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-instaweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-p4-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-p4-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitk-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.src" }, "product_reference": "git-0:1.8.3.1-25.el7_9.src", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-all-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-bzr-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-bzr-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-cvs-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-email-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-gui-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-hg-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-hg-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-instaweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-p4-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-p4-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitk-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src" }, "product_reference": "git-0:1.8.3.1-25.el7_9.src", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-all-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-bzr-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-bzr-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-cvs-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-email-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-gui-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-hg-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-hg-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-instaweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-p4-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-p4-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitk-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.src" }, "product_reference": "git-0:1.8.3.1-25.el7_9.src", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-all-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-bzr-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-bzr-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-cvs-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-email-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-gui-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-hg-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-hg-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-instaweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-p4-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-p4-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitk-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src" }, "product_reference": "git-0:1.8.3.1-25.el7_9.src", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-all-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-bzr-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-bzr-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-cvs-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-cvs-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-daemon-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-email-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-gui-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-hg-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-hg-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-instaweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-p4-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "git-p4-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:1.8.3.1-25.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64" }, "product_reference": "git-svn-0:1.8.3.1-25.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitk-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "gitweb-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" }, "product_reference": "perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "relates_to_product_reference": "7Workstation-optional-7.9.Z" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-25652", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188333" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25652" }, { "category": "external", "summary": "RHBZ#2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25652", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25652" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-23T09:25:47+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3263" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Client-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents" }, { "cve": "CVE-2023-29007", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188338" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a configuration file, where certain malicious configuration values may be misinterpreted as the beginning of a new configuration section. This flaw leads to arbitrary configuration injection.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-29007" }, { "category": "external", "summary": "RHBZ#2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29007", "url": "https://www.cve.org/CVERecord?id=CVE-2023-29007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-23T09:25:47+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Client-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3263" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Client-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Client-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Client-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Client-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Client-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7ComputeNode-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7ComputeNode-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7ComputeNode-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Server-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Server-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Server-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Server-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:emacs-git-el-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.src", "7Workstation-optional-7.9.Z:git-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-all-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-bzr-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-cvs-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-daemon-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-debuginfo-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-email-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-gnome-keyring-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:git-gui-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-hg-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-instaweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-p4-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.ppc64le", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.s390x", "7Workstation-optional-7.9.Z:git-svn-0:1.8.3.1-25.el7_9.x86_64", "7Workstation-optional-7.9.Z:gitk-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:gitweb-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-0:1.8.3.1-25.el7_9.noarch", "7Workstation-optional-7.9.Z:perl-Git-SVN-0:1.8.3.1-25.el7_9.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file" } ] }
rhsa-2023_3382
Vulnerability from csaf_redhat
Published
2023-05-31 13:13
Modified
2024-11-06 03:06
Summary
Red Hat Security Advisory: git security update
Notes
Topic
An update for git is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for git is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.\n\nSecurity Fix(es):\n\n* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)\n\n* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)\n\n* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:3382", "url": "https://access.redhat.com/errata/RHSA-2023:3382" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3382.json" } ], "title": "Red Hat Security Advisory: git security update", "tracking": { "current_release_date": "2024-11-06T03:06:58+00:00", "generator": { "date": "2024-11-06T03:06:58+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2023:3382", "initial_release_date": "2023-05-31T13:13:03+00:00", "revision_history": [ { "date": "2023-05-31T13:13:03+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-05-31T13:13:03+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T03:06:58+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product": { "name": "Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_aus:8.2::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "git-0:2.18.4-4.el8_2.src", "product": { "name": "git-0:2.18.4-4.el8_2.src", "product_id": "git-0:2.18.4-4.el8_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.18.4-4.el8_2?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "git-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-0:2.18.4-4.el8_2.x86_64", "product_id": "git-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-core-0:2.18.4-4.el8_2.x86_64", "product_id": "git-core-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-daemon-0:2.18.4-4.el8_2.x86_64", "product_id": "git-daemon-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-instaweb-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-instaweb-0:2.18.4-4.el8_2.x86_64", "product_id": "git-instaweb-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-instaweb@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-subtree-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-subtree-0:2.18.4-4.el8_2.x86_64", "product_id": "git-subtree-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-svn-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-svn-0:2.18.4-4.el8_2.x86_64", "product_id": "git-svn-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-debugsource-0:2.18.4-4.el8_2.x86_64", "product_id": "git-debugsource-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "product_id": "git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "product_id": "git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-debuginfo-0:2.18.4-4.el8_2.x86_64", "product_id": "git-debuginfo-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.18.4-4.el8_2?arch=x86_64" } } }, { "category": "product_version", "name": "git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "product": { "name": "git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "product_id": "git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn-debuginfo@2.18.4-4.el8_2?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "git-all-0:2.18.4-4.el8_2.noarch", "product": { "name": "git-all-0:2.18.4-4.el8_2.noarch", "product_id": "git-all-0:2.18.4-4.el8_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-all@2.18.4-4.el8_2?arch=noarch" } } }, { "category": "product_version", "name": "git-core-doc-0:2.18.4-4.el8_2.noarch", "product": { "name": "git-core-doc-0:2.18.4-4.el8_2.noarch", "product_id": "git-core-doc-0:2.18.4-4.el8_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-doc@2.18.4-4.el8_2?arch=noarch" } } }, { "category": "product_version", "name": "git-email-0:2.18.4-4.el8_2.noarch", "product": { "name": "git-email-0:2.18.4-4.el8_2.noarch", "product_id": "git-email-0:2.18.4-4.el8_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-email@2.18.4-4.el8_2?arch=noarch" } } }, { "category": "product_version", "name": "git-gui-0:2.18.4-4.el8_2.noarch", "product": { "name": "git-gui-0:2.18.4-4.el8_2.noarch", "product_id": "git-gui-0:2.18.4-4.el8_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gui@2.18.4-4.el8_2?arch=noarch" } } }, { "category": "product_version", "name": "gitk-0:2.18.4-4.el8_2.noarch", "product": { "name": "gitk-0:2.18.4-4.el8_2.noarch", "product_id": "gitk-0:2.18.4-4.el8_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitk@2.18.4-4.el8_2?arch=noarch" } } }, { "category": "product_version", "name": "gitweb-0:2.18.4-4.el8_2.noarch", "product": { "name": "gitweb-0:2.18.4-4.el8_2.noarch", "product_id": "gitweb-0:2.18.4-4.el8_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitweb@2.18.4-4.el8_2?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-0:2.18.4-4.el8_2.noarch", "product": { "name": "perl-Git-0:2.18.4-4.el8_2.noarch", "product_id": "perl-Git-0:2.18.4-4.el8_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git@2.18.4-4.el8_2?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-SVN-0:2.18.4-4.el8_2.noarch", "product": { "name": "perl-Git-SVN-0:2.18.4-4.el8_2.noarch", "product_id": "perl-Git-SVN-0:2.18.4-4.el8_2.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git-SVN@2.18.4-4.el8_2?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "git-0:2.18.4-4.el8_2.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src" }, "product_reference": "git-0:2.18.4-4.el8_2.src", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch" }, "product_reference": "git-all-0:2.18.4-4.el8_2.noarch", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-core-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-doc-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch" }, "product_reference": "git-core-doc-0:2.18.4-4.el8_2.noarch", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-daemon-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-debuginfo-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-debugsource-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch" }, "product_reference": "git-email-0:2.18.4-4.el8_2.noarch", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch" }, "product_reference": "git-gui-0:2.18.4-4.el8_2.noarch", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-instaweb-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-subtree-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-svn-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64" }, "product_reference": "git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch" }, "product_reference": "gitk-0:2.18.4-4.el8_2.noarch", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch" }, "product_reference": "gitweb-0:2.18.4-4.el8_2.noarch", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch" }, "product_reference": "perl-Git-0:2.18.4-4.el8_2.noarch", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)", "product_id": "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" }, "product_reference": "perl-Git-SVN-0:2.18.4-4.el8_2.noarch", "relates_to_product_reference": "AppStream-8.2.0.Z.AUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-25652", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188333" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src", "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25652" }, { "category": "external", "summary": "RHBZ#2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25652", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25652" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-31T13:13:03+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src", "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3382" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src", "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents" }, { "cve": "CVE-2023-25815", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188337" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the malicious placement of crafted messages.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: malicious placement of crafted messages when git was compiled with runtime prefix", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src", "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25815" }, { "category": "external", "summary": "RHBZ#2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25815", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-31T13:13:03+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src", "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3382" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src", "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "git: malicious placement of crafted messages when git was compiled with runtime prefix" }, { "cve": "CVE-2023-29007", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188338" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a configuration file, where certain malicious configuration values may be misinterpreted as the beginning of a new configuration section. This flaw leads to arbitrary configuration injection.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src", "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-29007" }, { "category": "external", "summary": "RHBZ#2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29007", "url": "https://www.cve.org/CVERecord?id=CVE-2023-29007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-31T13:13:03+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src", "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3382" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.src", "AppStream-8.2.0.Z.AUS:git-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-all-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-core-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-core-doc-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-daemon-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-debugsource-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-email-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-gui-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:git-instaweb-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-subtree-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64", "AppStream-8.2.0.Z.AUS:gitk-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:gitweb-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-0:2.18.4-4.el8_2.noarch", "AppStream-8.2.0.Z.AUS:perl-Git-SVN-0:2.18.4-4.el8_2.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file" } ] }
rhsa-2023_3248
Vulnerability from csaf_redhat
Published
2023-05-22 07:07
Modified
2024-11-06 03:03
Summary
Red Hat Security Advisory: git security update
Notes
Topic
An update for git is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for git is now available for Red Hat Enterprise Linux 9.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.\n\nSecurity Fix(es):\n\n* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)\n\n* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)\n\n* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:3248", "url": "https://access.redhat.com/errata/RHSA-2023:3248" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3248.json" } ], "title": "Red Hat Security Advisory: git security update", "tracking": { "current_release_date": "2024-11-06T03:03:01+00:00", "generator": { "date": "2024-11-06T03:03:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2023:3248", "initial_release_date": "2023-05-22T07:07:11+00:00", "revision_history": [ { "date": "2023-05-22T07:07:11+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-05-22T07:07:11+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T03:03:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product": { "name": "Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:9.0::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-5.el9_0.src", "product": { "name": "git-0:2.31.1-5.el9_0.src", "product_id": "git-0:2.31.1-5.el9_0.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-5.el9_0?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-0:2.31.1-5.el9_0.aarch64", "product_id": "git-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-5.el9_0?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-core-0:2.31.1-5.el9_0.aarch64", "product_id": "git-core-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.31.1-5.el9_0?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "product_id": "git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.31.1-5.el9_0?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-daemon-0:2.31.1-5.el9_0.aarch64", "product_id": "git-daemon-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.31.1-5.el9_0?arch=aarch64" } } }, { "category": "product_version", "name": "git-subtree-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-subtree-0:2.31.1-5.el9_0.aarch64", "product_id": "git-subtree-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.31.1-5.el9_0?arch=aarch64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-debugsource-0:2.31.1-5.el9_0.aarch64", "product_id": "git-debugsource-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.31.1-5.el9_0?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "product_id": "git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.31.1-5.el9_0?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "product_id": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.31.1-5.el9_0?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "product_id": "git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.31.1-5.el9_0?arch=aarch64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.31.1-5.el9_0.aarch64", "product": { "name": "git-debuginfo-0:2.31.1-5.el9_0.aarch64", "product_id": "git-debuginfo-0:2.31.1-5.el9_0.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.31.1-5.el9_0?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-5.el9_0?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-core-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-core-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.31.1-5.el9_0?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.31.1-5.el9_0?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-daemon-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-daemon-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.31.1-5.el9_0?arch=ppc64le" } } }, { "category": "product_version", "name": "git-subtree-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-subtree-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-subtree-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.31.1-5.el9_0?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debugsource-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-debugsource-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-debugsource-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.31.1-5.el9_0?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.31.1-5.el9_0?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.31.1-5.el9_0?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.31.1-5.el9_0?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product": { "name": "git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product_id": "git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.31.1-5.el9_0?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-0:2.31.1-5.el9_0.x86_64", "product_id": "git-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-5.el9_0?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-core-0:2.31.1-5.el9_0.x86_64", "product_id": "git-core-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.31.1-5.el9_0?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "product_id": "git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.31.1-5.el9_0?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-daemon-0:2.31.1-5.el9_0.x86_64", "product_id": "git-daemon-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.31.1-5.el9_0?arch=x86_64" } } }, { "category": "product_version", "name": "git-subtree-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-subtree-0:2.31.1-5.el9_0.x86_64", "product_id": "git-subtree-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.31.1-5.el9_0?arch=x86_64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-debugsource-0:2.31.1-5.el9_0.x86_64", "product_id": "git-debugsource-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.31.1-5.el9_0?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "product_id": "git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.31.1-5.el9_0?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "product_id": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.31.1-5.el9_0?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "product_id": "git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.31.1-5.el9_0?arch=x86_64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.31.1-5.el9_0.x86_64", "product": { "name": "git-debuginfo-0:2.31.1-5.el9_0.x86_64", "product_id": "git-debuginfo-0:2.31.1-5.el9_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.31.1-5.el9_0?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-0:2.31.1-5.el9_0.s390x", "product_id": "git-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-5.el9_0?arch=s390x" } } }, { "category": "product_version", "name": "git-core-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-core-0:2.31.1-5.el9_0.s390x", "product_id": "git-core-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.31.1-5.el9_0?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "product_id": "git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.31.1-5.el9_0?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-daemon-0:2.31.1-5.el9_0.s390x", "product_id": "git-daemon-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.31.1-5.el9_0?arch=s390x" } } }, { "category": "product_version", "name": "git-subtree-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-subtree-0:2.31.1-5.el9_0.s390x", "product_id": "git-subtree-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.31.1-5.el9_0?arch=s390x" } } }, { "category": "product_version", "name": "git-debugsource-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-debugsource-0:2.31.1-5.el9_0.s390x", "product_id": "git-debugsource-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.31.1-5.el9_0?arch=s390x" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "product_id": "git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.31.1-5.el9_0?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "product_id": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.31.1-5.el9_0?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "product_id": "git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.31.1-5.el9_0?arch=s390x" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.31.1-5.el9_0.s390x", "product": { "name": "git-debuginfo-0:2.31.1-5.el9_0.s390x", "product_id": "git-debuginfo-0:2.31.1-5.el9_0.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.31.1-5.el9_0?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "git-all-0:2.31.1-5.el9_0.noarch", "product": { "name": "git-all-0:2.31.1-5.el9_0.noarch", "product_id": "git-all-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-all@2.31.1-5.el9_0?arch=noarch" } } }, { "category": "product_version", "name": "git-core-doc-0:2.31.1-5.el9_0.noarch", "product": { "name": "git-core-doc-0:2.31.1-5.el9_0.noarch", "product_id": "git-core-doc-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-doc@2.31.1-5.el9_0?arch=noarch" } } }, { "category": "product_version", "name": "git-email-0:2.31.1-5.el9_0.noarch", "product": { "name": "git-email-0:2.31.1-5.el9_0.noarch", "product_id": "git-email-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-email@2.31.1-5.el9_0?arch=noarch" } } }, { "category": "product_version", "name": "git-gui-0:2.31.1-5.el9_0.noarch", "product": { "name": "git-gui-0:2.31.1-5.el9_0.noarch", "product_id": "git-gui-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gui@2.31.1-5.el9_0?arch=noarch" } } }, { "category": "product_version", "name": "git-instaweb-0:2.31.1-5.el9_0.noarch", "product": { "name": "git-instaweb-0:2.31.1-5.el9_0.noarch", "product_id": "git-instaweb-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-instaweb@2.31.1-5.el9_0?arch=noarch" } } }, { "category": "product_version", "name": "git-svn-0:2.31.1-5.el9_0.noarch", "product": { "name": "git-svn-0:2.31.1-5.el9_0.noarch", "product_id": "git-svn-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@2.31.1-5.el9_0?arch=noarch" } } }, { "category": "product_version", "name": "gitk-0:2.31.1-5.el9_0.noarch", "product": { "name": "gitk-0:2.31.1-5.el9_0.noarch", "product_id": "gitk-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitk@2.31.1-5.el9_0?arch=noarch" } } }, { "category": "product_version", "name": "gitweb-0:2.31.1-5.el9_0.noarch", "product": { "name": "gitweb-0:2.31.1-5.el9_0.noarch", "product_id": "gitweb-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitweb@2.31.1-5.el9_0?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-0:2.31.1-5.el9_0.noarch", "product": { "name": "perl-Git-0:2.31.1-5.el9_0.noarch", "product_id": "perl-Git-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git@2.31.1-5.el9_0?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-SVN-0:2.31.1-5.el9_0.noarch", "product": { "name": "perl-Git-SVN-0:2.31.1-5.el9_0.noarch", "product_id": "perl-Git-SVN-0:2.31.1-5.el9_0.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git-SVN@2.31.1-5.el9_0?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-5.el9_0.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src" }, "product_reference": "git-0:2.31.1-5.el9_0.src", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch" }, "product_reference": "git-all-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-core-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-core-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-core-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-core-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-doc-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch" }, "product_reference": "git-core-doc-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-daemon-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-daemon-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-daemon-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-daemon-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-debuginfo-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-debuginfo-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-debuginfo-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-debugsource-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-debugsource-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-debugsource-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-debugsource-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch" }, "product_reference": "git-email-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch" }, "product_reference": "git-gui-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch" }, "product_reference": "git-instaweb-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.31.1-5.el9_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64" }, "product_reference": "git-subtree-0:2.31.1-5.el9_0.aarch64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.31.1-5.el9_0.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le" }, "product_reference": "git-subtree-0:2.31.1-5.el9_0.ppc64le", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.31.1-5.el9_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x" }, "product_reference": "git-subtree-0:2.31.1-5.el9_0.s390x", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.31.1-5.el9_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64" }, "product_reference": "git-subtree-0:2.31.1-5.el9_0.x86_64", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch" }, "product_reference": "git-svn-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch" }, "product_reference": "gitk-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch" }, "product_reference": "gitweb-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch" }, "product_reference": "perl-Git-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:2.31.1-5.el9_0.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.0)", "product_id": "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" }, "product_reference": "perl-Git-SVN-0:2.31.1-5.el9_0.noarch", "relates_to_product_reference": "AppStream-9.0.0.Z.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-25652", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188333" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25652" }, { "category": "external", "summary": "RHBZ#2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25652", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25652" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:07:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3248" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents" }, { "cve": "CVE-2023-25815", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188337" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the malicious placement of crafted messages.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: malicious placement of crafted messages when git was compiled with runtime prefix", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25815" }, { "category": "external", "summary": "RHBZ#2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25815", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:07:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3248" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "git: malicious placement of crafted messages when git was compiled with runtime prefix" }, { "cve": "CVE-2023-29007", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188338" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a configuration file, where certain malicious configuration values may be misinterpreted as the beginning of a new configuration section. This flaw leads to arbitrary configuration injection.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-29007" }, { "category": "external", "summary": "RHBZ#2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29007", "url": "https://www.cve.org/CVERecord?id=CVE-2023-29007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:07:11+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3248" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.src", "AppStream-9.0.0.Z.EUS:git-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-all-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-core-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-core-doc-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debuginfo-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-debugsource-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-email-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-gui-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-instaweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.aarch64", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.ppc64le", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.s390x", "AppStream-9.0.0.Z.EUS:git-subtree-0:2.31.1-5.el9_0.x86_64", "AppStream-9.0.0.Z.EUS:git-svn-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitk-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:gitweb-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-0:2.31.1-5.el9_0.noarch", "AppStream-9.0.0.Z.EUS:perl-Git-SVN-0:2.31.1-5.el9_0.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file" } ] }
rhsa-2023_3243
Vulnerability from csaf_redhat
Published
2023-05-22 06:55
Modified
2024-11-06 03:03
Summary
Red Hat Security Advisory: git security update
Notes
Topic
An update for git is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for git is now available for Red Hat Enterprise Linux 8.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.\n\nSecurity Fix(es):\n\n* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)\n\n* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)\n\n* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:3243", "url": "https://access.redhat.com/errata/RHSA-2023:3243" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3243.json" } ], "title": "Red Hat Security Advisory: git security update", "tracking": { "current_release_date": "2024-11-06T03:03:11+00:00", "generator": { "date": "2024-11-06T03:03:11+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2023:3243", "initial_release_date": "2023-05-22T06:55:20+00:00", "revision_history": [ { "date": "2023-05-22T06:55:20+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-05-22T06:55:20+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T03:03:11+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product": { "name": "Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.4::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "git-0:2.27.0-4.el8_4.src", "product": { "name": "git-0:2.27.0-4.el8_4.src", "product_id": "git-0:2.27.0-4.el8_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.27.0-4.el8_4?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "git-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-0:2.27.0-4.el8_4.aarch64", "product_id": "git-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.27.0-4.el8_4?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-core-0:2.27.0-4.el8_4.aarch64", "product_id": "git-core-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.27.0-4.el8_4?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "product_id": "git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.27.0-4.el8_4?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-daemon-0:2.27.0-4.el8_4.aarch64", "product_id": "git-daemon-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.27.0-4.el8_4?arch=aarch64" } } }, { "category": "product_version", "name": "git-subtree-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-subtree-0:2.27.0-4.el8_4.aarch64", "product_id": "git-subtree-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.27.0-4.el8_4?arch=aarch64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-debugsource-0:2.27.0-4.el8_4.aarch64", "product_id": "git-debugsource-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.27.0-4.el8_4?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "product_id": "git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.27.0-4.el8_4?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "product_id": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.27.0-4.el8_4?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "product_id": "git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.27.0-4.el8_4?arch=aarch64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.27.0-4.el8_4.aarch64", "product": { "name": "git-debuginfo-0:2.27.0-4.el8_4.aarch64", "product_id": "git-debuginfo-0:2.27.0-4.el8_4.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.27.0-4.el8_4?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.27.0-4.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-core-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-core-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.27.0-4.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.27.0-4.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-daemon-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-daemon-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.27.0-4.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "git-subtree-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-subtree-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-subtree-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.27.0-4.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debugsource-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-debugsource-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-debugsource-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.27.0-4.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.27.0-4.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.27.0-4.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.27.0-4.el8_4?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product": { "name": "git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product_id": "git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.27.0-4.el8_4?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "git-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-0:2.27.0-4.el8_4.x86_64", "product_id": "git-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.27.0-4.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-core-0:2.27.0-4.el8_4.x86_64", "product_id": "git-core-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.27.0-4.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "product_id": "git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.27.0-4.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-daemon-0:2.27.0-4.el8_4.x86_64", "product_id": "git-daemon-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.27.0-4.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "git-subtree-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-subtree-0:2.27.0-4.el8_4.x86_64", "product_id": "git-subtree-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.27.0-4.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-debugsource-0:2.27.0-4.el8_4.x86_64", "product_id": "git-debugsource-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.27.0-4.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "product_id": "git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.27.0-4.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "product_id": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.27.0-4.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "product_id": "git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.27.0-4.el8_4?arch=x86_64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.27.0-4.el8_4.x86_64", "product": { "name": "git-debuginfo-0:2.27.0-4.el8_4.x86_64", "product_id": "git-debuginfo-0:2.27.0-4.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.27.0-4.el8_4?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-0:2.27.0-4.el8_4.s390x", "product_id": "git-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.27.0-4.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "git-core-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-core-0:2.27.0-4.el8_4.s390x", "product_id": "git-core-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.27.0-4.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "product_id": "git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.27.0-4.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-daemon-0:2.27.0-4.el8_4.s390x", "product_id": "git-daemon-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.27.0-4.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "git-subtree-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-subtree-0:2.27.0-4.el8_4.s390x", "product_id": "git-subtree-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.27.0-4.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "git-debugsource-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-debugsource-0:2.27.0-4.el8_4.s390x", "product_id": "git-debugsource-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.27.0-4.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "product_id": "git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.27.0-4.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "product_id": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.27.0-4.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "product_id": "git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.27.0-4.el8_4?arch=s390x" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.27.0-4.el8_4.s390x", "product": { "name": "git-debuginfo-0:2.27.0-4.el8_4.s390x", "product_id": "git-debuginfo-0:2.27.0-4.el8_4.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.27.0-4.el8_4?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "git-all-0:2.27.0-4.el8_4.noarch", "product": { "name": "git-all-0:2.27.0-4.el8_4.noarch", "product_id": "git-all-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-all@2.27.0-4.el8_4?arch=noarch" } } }, { "category": "product_version", "name": "git-core-doc-0:2.27.0-4.el8_4.noarch", "product": { "name": "git-core-doc-0:2.27.0-4.el8_4.noarch", "product_id": "git-core-doc-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-doc@2.27.0-4.el8_4?arch=noarch" } } }, { "category": "product_version", "name": "git-email-0:2.27.0-4.el8_4.noarch", "product": { "name": "git-email-0:2.27.0-4.el8_4.noarch", "product_id": "git-email-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-email@2.27.0-4.el8_4?arch=noarch" } } }, { "category": "product_version", "name": "git-gui-0:2.27.0-4.el8_4.noarch", "product": { "name": "git-gui-0:2.27.0-4.el8_4.noarch", "product_id": "git-gui-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gui@2.27.0-4.el8_4?arch=noarch" } } }, { "category": "product_version", "name": "git-instaweb-0:2.27.0-4.el8_4.noarch", "product": { "name": "git-instaweb-0:2.27.0-4.el8_4.noarch", "product_id": "git-instaweb-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-instaweb@2.27.0-4.el8_4?arch=noarch" } } }, { "category": "product_version", "name": "git-svn-0:2.27.0-4.el8_4.noarch", "product": { "name": "git-svn-0:2.27.0-4.el8_4.noarch", "product_id": "git-svn-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@2.27.0-4.el8_4?arch=noarch" } } }, { "category": "product_version", "name": "gitk-0:2.27.0-4.el8_4.noarch", "product": { "name": "gitk-0:2.27.0-4.el8_4.noarch", "product_id": "gitk-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitk@2.27.0-4.el8_4?arch=noarch" } } }, { "category": "product_version", "name": "gitweb-0:2.27.0-4.el8_4.noarch", "product": { "name": "gitweb-0:2.27.0-4.el8_4.noarch", "product_id": "gitweb-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitweb@2.27.0-4.el8_4?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-0:2.27.0-4.el8_4.noarch", "product": { "name": "perl-Git-0:2.27.0-4.el8_4.noarch", "product_id": "perl-Git-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git@2.27.0-4.el8_4?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-SVN-0:2.27.0-4.el8_4.noarch", "product": { "name": "perl-Git-SVN-0:2.27.0-4.el8_4.noarch", "product_id": "perl-Git-SVN-0:2.27.0-4.el8_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git-SVN@2.27.0-4.el8_4?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "git-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.27.0-4.el8_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src" }, "product_reference": "git-0:2.27.0-4.el8_4.src", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch" }, "product_reference": "git-all-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-core-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-core-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-core-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-core-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-doc-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch" }, "product_reference": "git-core-doc-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-daemon-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-daemon-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-daemon-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-daemon-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-debuginfo-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-debuginfo-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-debuginfo-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-debugsource-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-debugsource-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-debugsource-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-debugsource-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch" }, "product_reference": "git-email-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch" }, "product_reference": "git-gui-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch" }, "product_reference": "git-instaweb-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.27.0-4.el8_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64" }, "product_reference": "git-subtree-0:2.27.0-4.el8_4.aarch64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.27.0-4.el8_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le" }, "product_reference": "git-subtree-0:2.27.0-4.el8_4.ppc64le", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.27.0-4.el8_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x" }, "product_reference": "git-subtree-0:2.27.0-4.el8_4.s390x", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.27.0-4.el8_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64" }, "product_reference": "git-subtree-0:2.27.0-4.el8_4.x86_64", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch" }, "product_reference": "git-svn-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch" }, "product_reference": "gitk-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch" }, "product_reference": "gitweb-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch" }, "product_reference": "perl-Git-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:2.27.0-4.el8_4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.4)", "product_id": "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" }, "product_reference": "perl-Git-SVN-0:2.27.0-4.el8_4.noarch", "relates_to_product_reference": "AppStream-8.4.0.Z.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-25652", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188333" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25652" }, { "category": "external", "summary": "RHBZ#2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25652", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25652" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T06:55:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3243" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents" }, { "cve": "CVE-2023-25815", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188337" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the malicious placement of crafted messages.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: malicious placement of crafted messages when git was compiled with runtime prefix", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25815" }, { "category": "external", "summary": "RHBZ#2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25815", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T06:55:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3243" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "git: malicious placement of crafted messages when git was compiled with runtime prefix" }, { "cve": "CVE-2023-29007", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188338" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a configuration file, where certain malicious configuration values may be misinterpreted as the beginning of a new configuration section. This flaw leads to arbitrary configuration injection.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-29007" }, { "category": "external", "summary": "RHBZ#2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29007", "url": "https://www.cve.org/CVERecord?id=CVE-2023-29007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T06:55:20+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3243" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.src", "AppStream-8.4.0.Z.EUS:git-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-all-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-core-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-core-doc-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-daemon-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debuginfo-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-debugsource-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-email-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-gui-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-instaweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.aarch64", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.ppc64le", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.s390x", "AppStream-8.4.0.Z.EUS:git-subtree-0:2.27.0-4.el8_4.x86_64", "AppStream-8.4.0.Z.EUS:git-svn-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitk-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:gitweb-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-0:2.27.0-4.el8_4.noarch", "AppStream-8.4.0.Z.EUS:perl-Git-SVN-0:2.27.0-4.el8_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file" } ] }
rhsa-2023_3246
Vulnerability from csaf_redhat
Published
2023-05-22 07:11
Modified
2024-11-06 03:03
Summary
Red Hat Security Advisory: git security update
Notes
Topic
An update for git is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: data exfiltration with maliciously crafted repository (CVE-2023-22490)
* git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for git is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.\n\nSecurity Fix(es):\n\n* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)\n\n* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)\n\n* git: data exfiltration with maliciously crafted repository (CVE-2023-22490)\n\n* git: git apply: a path outside the working tree can be overwritten with crafted input (CVE-2023-23946)\n\n* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:3246", "url": "https://access.redhat.com/errata/RHSA-2023:3246" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2168160", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2168160" }, { "category": "external", "summary": "2168161", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2168161" }, { "category": "external", "summary": "2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3246.json" } ], "title": "Red Hat Security Advisory: git security update", "tracking": { "current_release_date": "2024-11-06T03:03:22+00:00", "generator": { "date": "2024-11-06T03:03:22+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2023:3246", "initial_release_date": "2023-05-22T07:11:28+00:00", "revision_history": [ { "date": "2023-05-22T07:11:28+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-05-22T07:11:28+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T03:03:22+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product": { "name": "Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el8_8.src", "product": { "name": "git-0:2.39.3-1.el8_8.src", "product_id": "git-0:2.39.3-1.el8_8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el8_8?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-0:2.39.3-1.el8_8.aarch64", "product_id": "git-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el8_8?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-core-0:2.39.3-1.el8_8.aarch64", "product_id": "git-core-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.39.3-1.el8_8?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "product_id": "git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.39.3-1.el8_8?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-daemon-0:2.39.3-1.el8_8.aarch64", "product_id": "git-daemon-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.39.3-1.el8_8?arch=aarch64" } } }, { "category": "product_version", "name": "git-subtree-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-subtree-0:2.39.3-1.el8_8.aarch64", "product_id": "git-subtree-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.39.3-1.el8_8?arch=aarch64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-debugsource-0:2.39.3-1.el8_8.aarch64", "product_id": "git-debugsource-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.39.3-1.el8_8?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "product_id": "git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.39.3-1.el8_8?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "product_id": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.39.3-1.el8_8?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "product_id": "git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.39.3-1.el8_8?arch=aarch64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.39.3-1.el8_8.aarch64", "product": { "name": "git-debuginfo-0:2.39.3-1.el8_8.aarch64", "product_id": "git-debuginfo-0:2.39.3-1.el8_8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.39.3-1.el8_8?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el8_8?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-core-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-core-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.39.3-1.el8_8?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.39.3-1.el8_8?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-daemon-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-daemon-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.39.3-1.el8_8?arch=ppc64le" } } }, { "category": "product_version", "name": "git-subtree-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-subtree-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-subtree-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.39.3-1.el8_8?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debugsource-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-debugsource-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-debugsource-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.39.3-1.el8_8?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.39.3-1.el8_8?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.39.3-1.el8_8?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.39.3-1.el8_8?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product": { "name": "git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product_id": "git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.39.3-1.el8_8?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-0:2.39.3-1.el8_8.x86_64", "product_id": "git-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el8_8?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-core-0:2.39.3-1.el8_8.x86_64", "product_id": "git-core-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.39.3-1.el8_8?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "product_id": "git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.39.3-1.el8_8?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-daemon-0:2.39.3-1.el8_8.x86_64", "product_id": "git-daemon-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.39.3-1.el8_8?arch=x86_64" } } }, { "category": "product_version", "name": "git-subtree-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-subtree-0:2.39.3-1.el8_8.x86_64", "product_id": "git-subtree-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.39.3-1.el8_8?arch=x86_64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-debugsource-0:2.39.3-1.el8_8.x86_64", "product_id": "git-debugsource-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.39.3-1.el8_8?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "product_id": "git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.39.3-1.el8_8?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "product_id": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.39.3-1.el8_8?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "product_id": "git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.39.3-1.el8_8?arch=x86_64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.39.3-1.el8_8.x86_64", "product": { "name": "git-debuginfo-0:2.39.3-1.el8_8.x86_64", "product_id": "git-debuginfo-0:2.39.3-1.el8_8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.39.3-1.el8_8?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-0:2.39.3-1.el8_8.s390x", "product_id": "git-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.39.3-1.el8_8?arch=s390x" } } }, { "category": "product_version", "name": "git-core-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-core-0:2.39.3-1.el8_8.s390x", "product_id": "git-core-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.39.3-1.el8_8?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "product_id": "git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.39.3-1.el8_8?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-daemon-0:2.39.3-1.el8_8.s390x", "product_id": "git-daemon-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.39.3-1.el8_8?arch=s390x" } } }, { "category": "product_version", "name": "git-subtree-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-subtree-0:2.39.3-1.el8_8.s390x", "product_id": "git-subtree-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.39.3-1.el8_8?arch=s390x" } } }, { "category": "product_version", "name": "git-debugsource-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-debugsource-0:2.39.3-1.el8_8.s390x", "product_id": "git-debugsource-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.39.3-1.el8_8?arch=s390x" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "product_id": "git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.39.3-1.el8_8?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "product_id": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.39.3-1.el8_8?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "product_id": "git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.39.3-1.el8_8?arch=s390x" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.39.3-1.el8_8.s390x", "product": { "name": "git-debuginfo-0:2.39.3-1.el8_8.s390x", "product_id": "git-debuginfo-0:2.39.3-1.el8_8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.39.3-1.el8_8?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "git-all-0:2.39.3-1.el8_8.noarch", "product": { "name": "git-all-0:2.39.3-1.el8_8.noarch", "product_id": "git-all-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-all@2.39.3-1.el8_8?arch=noarch" } } }, { "category": "product_version", "name": "git-core-doc-0:2.39.3-1.el8_8.noarch", "product": { "name": "git-core-doc-0:2.39.3-1.el8_8.noarch", "product_id": "git-core-doc-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-doc@2.39.3-1.el8_8?arch=noarch" } } }, { "category": "product_version", "name": "git-email-0:2.39.3-1.el8_8.noarch", "product": { "name": "git-email-0:2.39.3-1.el8_8.noarch", "product_id": "git-email-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-email@2.39.3-1.el8_8?arch=noarch" } } }, { "category": "product_version", "name": "git-gui-0:2.39.3-1.el8_8.noarch", "product": { "name": "git-gui-0:2.39.3-1.el8_8.noarch", "product_id": "git-gui-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gui@2.39.3-1.el8_8?arch=noarch" } } }, { "category": "product_version", "name": "git-instaweb-0:2.39.3-1.el8_8.noarch", "product": { "name": "git-instaweb-0:2.39.3-1.el8_8.noarch", "product_id": "git-instaweb-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-instaweb@2.39.3-1.el8_8?arch=noarch" } } }, { "category": "product_version", "name": "git-svn-0:2.39.3-1.el8_8.noarch", "product": { "name": "git-svn-0:2.39.3-1.el8_8.noarch", "product_id": "git-svn-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@2.39.3-1.el8_8?arch=noarch" } } }, { "category": "product_version", "name": "gitk-0:2.39.3-1.el8_8.noarch", "product": { "name": "gitk-0:2.39.3-1.el8_8.noarch", "product_id": "gitk-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitk@2.39.3-1.el8_8?arch=noarch" } } }, { "category": "product_version", "name": "gitweb-0:2.39.3-1.el8_8.noarch", "product": { "name": "gitweb-0:2.39.3-1.el8_8.noarch", "product_id": "gitweb-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitweb@2.39.3-1.el8_8?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-0:2.39.3-1.el8_8.noarch", "product": { "name": "perl-Git-0:2.39.3-1.el8_8.noarch", "product_id": "perl-Git-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git@2.39.3-1.el8_8?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-SVN-0:2.39.3-1.el8_8.noarch", "product": { "name": "perl-Git-SVN-0:2.39.3-1.el8_8.noarch", "product_id": "perl-Git-SVN-0:2.39.3-1.el8_8.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git-SVN@2.39.3-1.el8_8?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el8_8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src" }, "product_reference": "git-0:2.39.3-1.el8_8.src", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch" }, "product_reference": "git-all-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-core-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-core-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-core-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-core-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-doc-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch" }, "product_reference": "git-core-doc-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-daemon-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-daemon-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-daemon-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-daemon-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-debuginfo-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-debuginfo-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-debuginfo-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-debugsource-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-debugsource-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-debugsource-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-debugsource-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch" }, "product_reference": "git-email-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch" }, "product_reference": "git-gui-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch" }, "product_reference": "git-instaweb-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.39.3-1.el8_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64" }, "product_reference": "git-subtree-0:2.39.3-1.el8_8.aarch64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.39.3-1.el8_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le" }, "product_reference": "git-subtree-0:2.39.3-1.el8_8.ppc64le", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.39.3-1.el8_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x" }, "product_reference": "git-subtree-0:2.39.3-1.el8_8.s390x", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.39.3-1.el8_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64" }, "product_reference": "git-subtree-0:2.39.3-1.el8_8.x86_64", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch" }, "product_reference": "git-svn-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch" }, "product_reference": "gitk-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch" }, "product_reference": "gitweb-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch" }, "product_reference": "perl-Git-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:2.39.3-1.el8_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 8)", "product_id": "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" }, "product_reference": "perl-Git-SVN-0:2.39.3-1.el8_8.noarch", "relates_to_product_reference": "AppStream-8.8.0.Z.MAIN.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-22490", "cwe": { "id": "CWE-402", "name": "Transmission of Private Resources into a New Sphere (\u0027Resource Leak\u0027)" }, "discovery_date": "2023-02-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2168160" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. Using a specially-crafted repository, Git can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort local clones whose source $GIT_DIR/objects directory contains symbolic links (CVE-2022-39253), the objects directory may still be a symbolic link.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: data exfiltration with maliciously crafted repository", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-22490" }, { "category": "external", "summary": "RHBZ#2168160", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2168160" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-22490", "url": "https://www.cve.org/CVERecord?id=CVE-2023-22490" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-22490", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22490" }, { "category": "external", "summary": "https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/", "url": "https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/" }, { "category": "external", "summary": "https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q", "url": "https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q" } ], "release_date": "2023-02-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:11:28+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3246" }, { "category": "workaround", "details": "- Avoid cloning repositories from untrusted sources with --recurse-submodules.\n- Instead, consider cloning repositories without recursively cloning their submodules, and instead run git submodule update at each layer. Before doing so, inspect each new .gitmodules file to ensure that it does not contain suspicious module URLs.", "product_ids": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "git: data exfiltration with maliciously crafted repository" }, { "cve": "CVE-2023-23946", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2023-02-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2168161" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security issue occurs when feeding a crafted input to \"git apply.\" A path outside the working tree can be overwritten by the user running \"git apply.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "git: git apply: a path outside the working tree can be overwritten with crafted input", "title": "Vulnerability summary" }, { "category": "other", "text": "This vulnerability marked as Moderate severity and it\u0027s less likely to be exploitable because it requires a specially crafted malicious patch to be applied via git apply, to overwrite files outside the working tree of the user running git apply. This could lead to some compromise of integrity of resources under certain circumstances, however it does not compromise the whole system or gain additional privileges to execute arbitrary code, or allow remote users to cause a denial of service.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-23946" }, { "category": "external", "summary": "RHBZ#2168161", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2168161" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-23946", "url": "https://www.cve.org/CVERecord?id=CVE-2023-23946" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-23946", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23946" }, { "category": "external", "summary": "https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/", "url": "https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/" }, { "category": "external", "summary": "https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh", "url": "https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh" } ], "release_date": "2023-02-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:11:28+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3246" }, { "category": "workaround", "details": "Use git apply --stat to inspect a patch before applying; avoid applying one that creates a symbolic link and then creates a file beyond the symbolic link.", "product_ids": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "git: git apply: a path outside the working tree can be overwritten with crafted input" }, { "cve": "CVE-2023-25652", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188333" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25652" }, { "category": "external", "summary": "RHBZ#2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25652", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25652" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:11:28+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3246" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents" }, { "cve": "CVE-2023-25815", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188337" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the malicious placement of crafted messages.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: malicious placement of crafted messages when git was compiled with runtime prefix", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25815" }, { "category": "external", "summary": "RHBZ#2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25815", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:11:28+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3246" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "git: malicious placement of crafted messages when git was compiled with runtime prefix" }, { "cve": "CVE-2023-29007", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188338" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a configuration file, where certain malicious configuration values may be misinterpreted as the beginning of a new configuration section. This flaw leads to arbitrary configuration injection.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-29007" }, { "category": "external", "summary": "RHBZ#2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29007", "url": "https://www.cve.org/CVERecord?id=CVE-2023-29007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:11:28+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3246" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.src", "AppStream-8.8.0.Z.MAIN.EUS:git-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-all-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-core-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-core-doc-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-credential-libsecret-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-daemon-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debuginfo-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-debugsource-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-email-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-gui-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-instaweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.aarch64", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.ppc64le", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.s390x", "AppStream-8.8.0.Z.MAIN.EUS:git-subtree-0:2.39.3-1.el8_8.x86_64", "AppStream-8.8.0.Z.MAIN.EUS:git-svn-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitk-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:gitweb-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-0:2.39.3-1.el8_8.noarch", "AppStream-8.8.0.Z.MAIN.EUS:perl-Git-SVN-0:2.39.3-1.el8_8.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file" } ] }
rhsa-2023_3247
Vulnerability from csaf_redhat
Published
2023-05-22 07:12
Modified
2024-11-06 03:02
Summary
Red Hat Security Advisory: git security update
Notes
Topic
An update for git is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
Security Fix(es):
* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)
* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)
* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for git is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.\n\nSecurity Fix(es):\n\n* git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (CVE-2023-25652)\n\n* git: arbitrary configuration injection when renaming or deleting a section from a configuration file (CVE-2023-29007)\n\n* git: malicious placement of crafted messages when git was compiled with runtime prefix (CVE-2023-25815)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2023:3247", "url": "https://access.redhat.com/errata/RHSA-2023:3247" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3247.json" } ], "title": "Red Hat Security Advisory: git security update", "tracking": { "current_release_date": "2024-11-06T03:02:51+00:00", "generator": { "date": "2024-11-06T03:02:51+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2023:3247", "initial_release_date": "2023-05-22T07:12:50+00:00", "revision_history": [ { "date": "2023-05-22T07:12:50+00:00", "number": "1", "summary": "Initial version" }, { "date": "2023-05-22T07:12:50+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-06T03:02:51+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product": { "name": "Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_eus:8.6::appstream" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-4.el8_6.src", "product": { "name": "git-0:2.31.1-4.el8_6.src", "product_id": "git-0:2.31.1-4.el8_6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-4.el8_6?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-0:2.31.1-4.el8_6.aarch64", "product_id": "git-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-4.el8_6?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-core-0:2.31.1-4.el8_6.aarch64", "product_id": "git-core-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.31.1-4.el8_6?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "product_id": "git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.31.1-4.el8_6?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-daemon-0:2.31.1-4.el8_6.aarch64", "product_id": "git-daemon-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.31.1-4.el8_6?arch=aarch64" } } }, { "category": "product_version", "name": "git-subtree-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-subtree-0:2.31.1-4.el8_6.aarch64", "product_id": "git-subtree-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.31.1-4.el8_6?arch=aarch64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-debugsource-0:2.31.1-4.el8_6.aarch64", "product_id": "git-debugsource-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.31.1-4.el8_6?arch=aarch64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "product_id": "git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.31.1-4.el8_6?arch=aarch64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "product_id": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.31.1-4.el8_6?arch=aarch64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "product_id": "git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.31.1-4.el8_6?arch=aarch64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.31.1-4.el8_6.aarch64", "product": { "name": "git-debuginfo-0:2.31.1-4.el8_6.aarch64", "product_id": "git-debuginfo-0:2.31.1-4.el8_6.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.31.1-4.el8_6?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-4.el8_6?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-core-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-core-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.31.1-4.el8_6?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.31.1-4.el8_6?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-daemon-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-daemon-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.31.1-4.el8_6?arch=ppc64le" } } }, { "category": "product_version", "name": "git-subtree-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-subtree-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-subtree-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.31.1-4.el8_6?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debugsource-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-debugsource-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-debugsource-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.31.1-4.el8_6?arch=ppc64le" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.31.1-4.el8_6?arch=ppc64le" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.31.1-4.el8_6?arch=ppc64le" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.31.1-4.el8_6?arch=ppc64le" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product": { "name": "git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product_id": "git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.31.1-4.el8_6?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-0:2.31.1-4.el8_6.x86_64", "product_id": "git-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-4.el8_6?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-core-0:2.31.1-4.el8_6.x86_64", "product_id": "git-core-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.31.1-4.el8_6?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "product_id": "git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.31.1-4.el8_6?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-daemon-0:2.31.1-4.el8_6.x86_64", "product_id": "git-daemon-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.31.1-4.el8_6?arch=x86_64" } } }, { "category": "product_version", "name": "git-subtree-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-subtree-0:2.31.1-4.el8_6.x86_64", "product_id": "git-subtree-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.31.1-4.el8_6?arch=x86_64" } } }, { "category": "product_version", "name": "git-debugsource-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-debugsource-0:2.31.1-4.el8_6.x86_64", "product_id": "git-debugsource-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.31.1-4.el8_6?arch=x86_64" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "product_id": "git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.31.1-4.el8_6?arch=x86_64" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "product_id": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.31.1-4.el8_6?arch=x86_64" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "product_id": "git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.31.1-4.el8_6?arch=x86_64" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.31.1-4.el8_6.x86_64", "product": { "name": "git-debuginfo-0:2.31.1-4.el8_6.x86_64", "product_id": "git-debuginfo-0:2.31.1-4.el8_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.31.1-4.el8_6?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "git-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-0:2.31.1-4.el8_6.s390x", "product_id": "git-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git@2.31.1-4.el8_6?arch=s390x" } } }, { "category": "product_version", "name": "git-core-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-core-0:2.31.1-4.el8_6.s390x", "product_id": "git-core-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core@2.31.1-4.el8_6?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "product_id": "git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret@2.31.1-4.el8_6?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-daemon-0:2.31.1-4.el8_6.s390x", "product_id": "git-daemon-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon@2.31.1-4.el8_6?arch=s390x" } } }, { "category": "product_version", "name": "git-subtree-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-subtree-0:2.31.1-4.el8_6.s390x", "product_id": "git-subtree-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-subtree@2.31.1-4.el8_6?arch=s390x" } } }, { "category": "product_version", "name": "git-debugsource-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-debugsource-0:2.31.1-4.el8_6.s390x", "product_id": "git-debugsource-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debugsource@2.31.1-4.el8_6?arch=s390x" } } }, { "category": "product_version", "name": "git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "product_id": "git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-debuginfo@2.31.1-4.el8_6?arch=s390x" } } }, { "category": "product_version", "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "product_id": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-credential-libsecret-debuginfo@2.31.1-4.el8_6?arch=s390x" } } }, { "category": "product_version", "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "product_id": "git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-daemon-debuginfo@2.31.1-4.el8_6?arch=s390x" } } }, { "category": "product_version", "name": "git-debuginfo-0:2.31.1-4.el8_6.s390x", "product": { "name": "git-debuginfo-0:2.31.1-4.el8_6.s390x", "product_id": "git-debuginfo-0:2.31.1-4.el8_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-debuginfo@2.31.1-4.el8_6?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "git-all-0:2.31.1-4.el8_6.noarch", "product": { "name": "git-all-0:2.31.1-4.el8_6.noarch", "product_id": "git-all-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-all@2.31.1-4.el8_6?arch=noarch" } } }, { "category": "product_version", "name": "git-core-doc-0:2.31.1-4.el8_6.noarch", "product": { "name": "git-core-doc-0:2.31.1-4.el8_6.noarch", "product_id": "git-core-doc-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-core-doc@2.31.1-4.el8_6?arch=noarch" } } }, { "category": "product_version", "name": "git-email-0:2.31.1-4.el8_6.noarch", "product": { "name": "git-email-0:2.31.1-4.el8_6.noarch", "product_id": "git-email-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-email@2.31.1-4.el8_6?arch=noarch" } } }, { "category": "product_version", "name": "git-gui-0:2.31.1-4.el8_6.noarch", "product": { "name": "git-gui-0:2.31.1-4.el8_6.noarch", "product_id": "git-gui-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-gui@2.31.1-4.el8_6?arch=noarch" } } }, { "category": "product_version", "name": "git-instaweb-0:2.31.1-4.el8_6.noarch", "product": { "name": "git-instaweb-0:2.31.1-4.el8_6.noarch", "product_id": "git-instaweb-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-instaweb@2.31.1-4.el8_6?arch=noarch" } } }, { "category": "product_version", "name": "git-svn-0:2.31.1-4.el8_6.noarch", "product": { "name": "git-svn-0:2.31.1-4.el8_6.noarch", "product_id": "git-svn-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/git-svn@2.31.1-4.el8_6?arch=noarch" } } }, { "category": "product_version", "name": "gitk-0:2.31.1-4.el8_6.noarch", "product": { "name": "gitk-0:2.31.1-4.el8_6.noarch", "product_id": "gitk-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitk@2.31.1-4.el8_6?arch=noarch" } } }, { "category": "product_version", "name": "gitweb-0:2.31.1-4.el8_6.noarch", "product": { "name": "gitweb-0:2.31.1-4.el8_6.noarch", "product_id": "gitweb-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/gitweb@2.31.1-4.el8_6?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-0:2.31.1-4.el8_6.noarch", "product": { "name": "perl-Git-0:2.31.1-4.el8_6.noarch", "product_id": "perl-Git-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git@2.31.1-4.el8_6?arch=noarch" } } }, { "category": "product_version", "name": "perl-Git-SVN-0:2.31.1-4.el8_6.noarch", "product": { "name": "perl-Git-SVN-0:2.31.1-4.el8_6.noarch", "product_id": "perl-Git-SVN-0:2.31.1-4.el8_6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/perl-Git-SVN@2.31.1-4.el8_6?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-4.el8_6.src as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src" }, "product_reference": "git-0:2.31.1-4.el8_6.src", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-all-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch" }, "product_reference": "git-all-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-core-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-core-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-core-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-core-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-debuginfo-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-core-doc-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch" }, "product_reference": "git-core-doc-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-daemon-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-daemon-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-daemon-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-daemon-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-debuginfo-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-debuginfo-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debuginfo-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-debuginfo-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-debugsource-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-debugsource-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-debugsource-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-debugsource-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-debugsource-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-email-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch" }, "product_reference": "git-email-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-gui-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch" }, "product_reference": "git-gui-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-instaweb-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch" }, "product_reference": "git-instaweb-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.31.1-4.el8_6.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64" }, "product_reference": "git-subtree-0:2.31.1-4.el8_6.aarch64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.31.1-4.el8_6.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le" }, "product_reference": "git-subtree-0:2.31.1-4.el8_6.ppc64le", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.31.1-4.el8_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x" }, "product_reference": "git-subtree-0:2.31.1-4.el8_6.s390x", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-subtree-0:2.31.1-4.el8_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64" }, "product_reference": "git-subtree-0:2.31.1-4.el8_6.x86_64", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "git-svn-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch" }, "product_reference": "git-svn-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitk-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch" }, "product_reference": "gitk-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "gitweb-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch" }, "product_reference": "gitweb-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch" }, "product_reference": "perl-Git-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "perl-Git-SVN-0:2.31.1-4.el8_6.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.8.6)", "product_id": "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" }, "product_reference": "perl-Git-SVN-0:2.31.1-4.el8_6.noarch", "relates_to_product_reference": "AppStream-8.6.0.Z.EUS" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-25652", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188333" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when feeding specially crafted input to `git apply --reject`; a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunk(s) from the given patch.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25652" }, { "category": "external", "summary": "RHBZ#2188333", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188333" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25652", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25652" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25652" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:12:50+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3247" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents" }, { "cve": "CVE-2023-25815", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188337" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the malicious placement of crafted messages.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: malicious placement of crafted messages when git was compiled with runtime prefix", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-25815" }, { "category": "external", "summary": "RHBZ#2188337", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188337" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-25815", "url": "https://www.cve.org/CVERecord?id=CVE-2023-25815" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-25815" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:12:50+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3247" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.2, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "git: malicious placement of crafted messages when git was compiled with runtime prefix" }, { "cve": "CVE-2023-29007", "discovery_date": "2023-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2188338" } ], "notes": [ { "category": "description", "text": "A vulnerability was found in Git. This security flaw occurs when renaming or deleting a section from a configuration file, where certain malicious configuration values may be misinterpreted as the beginning of a new configuration section. This flaw leads to arbitrary configuration injection.", "title": "Vulnerability description" }, { "category": "summary", "text": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2023-29007" }, { "category": "external", "summary": "RHBZ#2188338", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2188338" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2023-29007", "url": "https://www.cve.org/CVERecord?id=CVE-2023-29007" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-29007" } ], "release_date": "2023-04-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2023-05-22T07:12:50+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2023:3247" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.src", "AppStream-8.6.0.Z.EUS:git-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-all-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-core-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-core-doc-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-credential-libsecret-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-daemon-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debuginfo-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-debugsource-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-email-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-gui-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-instaweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.aarch64", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.ppc64le", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.s390x", "AppStream-8.6.0.Z.EUS:git-subtree-0:2.31.1-4.el8_6.x86_64", "AppStream-8.6.0.Z.EUS:git-svn-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitk-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:gitweb-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-0:2.31.1-4.el8_6.noarch", "AppStream-8.6.0.Z.EUS:perl-Git-SVN-0:2.31.1-4.el8_6.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "git: arbitrary configuration injection when renaming or deleting a section from a configuration file" } ] }
gsd-2023-29007
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user's `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2023-29007", "id": "GSD-2023-29007" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2023-29007" ], "details": "Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user\u0027s `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`.", "id": "GSD-2023-29007", "modified": "2023-12-13T01:20:57.063627Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "security-advisories@github.com", "ID": "CVE-2023-29007", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "git", "version": { "version_data": [ { "version_affected": "=", "version_value": "\u003c 2.30.9" }, { "version_affected": "=", "version_value": "\u003e= 2.31.0, \u003c 2.31.8" }, { "version_affected": "=", "version_value": "\u003e= 2.32.0, \u003c 2.32.7" }, { "version_affected": "=", "version_value": "\u003e= 2.33.0, \u003c 2.33.8" }, { "version_affected": "=", "version_value": "\u003e= 2.34.0, \u003c 2.34.8" }, { "version_affected": "=", "version_value": "\u003e= 2.35.0, \u003c 2.35.8" }, { "version_affected": "=", "version_value": "\u003e= 2.36.0, \u003c 2.36.6" }, { "version_affected": "=", "version_value": "\u003e= 2.37.0, \u003c 2.37.7" }, { "version_affected": "=", "version_value": "\u003e= 2.38.0, \u003c 2.38.5" }, { "version_affected": "=", "version_value": "\u003e= 2.39.0, \u003c 2.39.3" }, { "version_affected": "=", "version_value": "\u003e= 2.40.0, \u003c 2.40.1" } ] } } ] }, "vendor_name": "git" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user\u0027s `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`." } ] }, "impact": { "cvss": [ { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "cweId": "CWE-74", "lang": "eng", "value": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844", "refsource": "MISC", "url": "https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844" }, { "name": "https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4", "refsource": "MISC", "url": "https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4" }, { "name": "https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt", "refsource": "MISC", "url": "https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt" }, { "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/", "refsource": "MISC", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/" }, { "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/", "refsource": "MISC", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/" }, { "name": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/", "refsource": "MISC", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/" }, { "name": "https://security.gentoo.org/glsa/202312-15", "refsource": "MISC", "url": "https://security.gentoo.org/glsa/202312-15" } ] }, "source": { "advisory": "GHSA-v48j-4xgg-4844", "discovery": "UNKNOWN" } }, "nvd.nist.gov": { "cve": { "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "A2E4BF99-17B8-4424-B97E-DDB8A4793DAF", "versionEndExcluding": "2.30.9", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "2A1D7F29-E06F-4277-8713-1C19DE714300", "versionEndExcluding": "2.31.8", "versionStartIncluding": "2.31.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "0B69F022-B29E-4D9A-B4FC-78430AFF0C9C", "versionEndExcluding": "2.32.7", "versionStartIncluding": "2.32.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "8A2B603F-B8E2-4123-80A4-64E983FF1F86", "versionEndExcluding": "2.33.8", "versionStartIncluding": "2.33.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "26D3ED4E-246E-4D4D-9E2D-7890E93ECED8", "versionEndExcluding": "2.34.8", "versionStartIncluding": "2.34.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3988013-1332-49F8-85E7-7EB59BE36A63", "versionEndExcluding": "2.35.8", "versionStartIncluding": "2.35.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "0588D372-41D2-442E-976E-6B24DB1A1EC6", "versionEndExcluding": "2.36.5", "versionStartIncluding": "2.36.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "030542CA-76BF-4252-9E03-D7E44D3DEE19", "versionEndExcluding": "2.37.7", "versionStartIncluding": "2.37.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "6EAEE109-8AD8-4383-AAC3-E9D2A4794F8B", "versionEndExcluding": "2.38.5", "versionStartIncluding": "2.38.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*", "matchCriteriaId": "BE329F8E-076F-4895-A2A2-A1C0330C1F6F", "versionEndExcluding": "2.39.3", "versionStartIncluding": "2.39.0", "vulnerable": true }, { "criteria": "cpe:2.3:a:git-scm:git:2.40.0:*:*:*:*:*:*:*", "matchCriteriaId": "89633B46-319A-499C-9848-2EA60AC030EB", "vulnerable": true } ], "negate": false, "operator": "OR" } ] }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*", "matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD", "vulnerable": true }, { "criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*", "matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D", "vulnerable": true }, { "criteria": "cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*", "matchCriteriaId": "CC559B26-5DFC-4B7A-A27C-B77DE755DFF9", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "descriptions": [ { "lang": "en", "value": "Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_copy_or_rename_section_in_file()`. This bug can be used to inject arbitrary configuration into a user\u0027s `$GIT_DIR/config` when attempting to remove the configuration section associated with that submodule. When the attacker injects configuration values which specify executables to run (such as `core.pager`, `core.editor`, `core.sshCommand`, etc.) this can lead to a remote code execution. A fix A fix is available in versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1. As a workaround, avoid running `git submodule deinit` on untrusted repositories or without prior inspection of any submodule sections in `$GIT_DIR/config`." } ], "id": "CVE-2023-29007", "lastModified": "2024-02-01T15:37:02.590", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" }, { "cvssData": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.0, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary" } ] }, "published": "2023-04-25T21:15:10.403", "references": [ { "source": "security-advisories@github.com", "tags": [ "Vendor Advisory" ], "url": "https://github.com/git/git/blob/9ce9dea4e1c2419cca126d29fa7730baa078a11b/Documentation/RelNotes/2.30.9.txt" }, { "source": "security-advisories@github.com", "tags": [ "Patch" ], "url": "https://github.com/git/git/commit/528290f8c61222433a8cf02fb7cfffa8438432b4" }, { "source": "security-advisories@github.com", "tags": [ "Vendor Advisory" ], "url": "https://github.com/git/git/security/advisories/GHSA-v48j-4xgg-4844" }, { "source": "security-advisories@github.com", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PI7FZ4NNR5S5J5K6AMVQBH2JFP6NE4L7/" }, { "source": "security-advisories@github.com", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RKOXOAZ42HLXHXTW6JZI4L5DAIYDTYCU/" }, { "source": "security-advisories@github.com", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YFZWGQKB6MM5MNF2DLFTD7KS2KWPICKL/" }, { "source": "security-advisories@github.com", "tags": [ "Third Party Advisory" ], "url": "https://security.gentoo.org/glsa/202312-15" } ], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-74" } ], "source": "security-advisories@github.com", "type": "Primary" } ] } } } }
wid-sec-w-2023-1812
Vulnerability from csaf_certbund
Published
2023-07-18 22:00
Modified
2023-07-20 22:00
Summary
Oracle Communications: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Oracle Communications umfasst branchenspezifische Lösungen für die Telekommunikationsbranche.
Angriff
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Betroffene Betriebssysteme
- UNIX
- Linux
- Windows
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Oracle Communications umfasst branchenspezifische L\u00f6sungen f\u00fcr die Telekommunikationsbranche.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.", "title": "Angriff" }, { "category": "general", "text": "- UNIX\n- Linux\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1812 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1812.json" }, { "category": "self", "summary": "WID-SEC-2023-1812 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1812" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2263-2 vom 2023-07-20", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015545.html" }, { "category": "external", "summary": "Oracle Critical Patch Update Advisory - July 2023 - Appendix Oracle Communications vom 2023-07-18", "url": "https://www.oracle.com/security-alerts/cpujul2023.html#AppendixCGBU" } ], "source_lang": "en-US", "title": "Oracle Communications: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-07-20T22:00:00.000+00:00", "generator": { "date": "2024-02-15T17:37:23.436+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-1812", "initial_release_date": "2023-07-18T22:00:00.000+00:00", "revision_history": [ { "date": "2023-07-18T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-07-20T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von SUSE aufgenommen" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Communications 5.0", "product": { "name": "Oracle Communications 5.0", "product_id": "T021645", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:5.0" } } }, { "category": "product_name", "name": "Oracle Communications 8.6.0.0", "product": { "name": "Oracle Communications 8.6.0.0", "product_id": "T024970", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:8.6.0.0" } } }, { "category": "product_name", "name": "Oracle Communications 22.4.0", "product": { "name": "Oracle Communications 22.4.0", "product_id": "T024981", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:22.4.0" } } }, { "category": "product_name", "name": "Oracle Communications 22.3.2", "product": { "name": "Oracle Communications 22.3.2", "product_id": "T025865", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:22.3.2" } } }, { "category": "product_name", "name": "Oracle Communications 22.4.1", "product": { "name": "Oracle Communications 22.4.1", "product_id": "T025869", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:22.4.1" } } }, { "category": "product_name", "name": "Oracle Communications 23.1.0", "product": { "name": "Oracle Communications 23.1.0", "product_id": "T027326", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.1.0" } } }, { "category": "product_name", "name": "Oracle Communications 22.4.2", "product": { "name": "Oracle Communications 22.4.2", "product_id": "T027327", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:22.4.2" } } }, { "category": "product_name", "name": "Oracle Communications 23.1.1", "product": { "name": "Oracle Communications 23.1.1", "product_id": "T027329", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.1.1" } } }, { "category": "product_name", "name": "Oracle Communications 22.4.3", "product": { "name": "Oracle Communications 22.4.3", "product_id": "T028680", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:22.4.3" } } }, { "category": "product_name", "name": "Oracle Communications 23.1.2", "product": { "name": "Oracle Communications 23.1.2", "product_id": "T028681", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.1.2" } } }, { "category": "product_name", "name": "Oracle Communications 23.2.0", "product": { "name": "Oracle Communications 23.2.0", "product_id": "T028682", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:23.2.0" } } }, { "category": "product_name", "name": "Oracle Communications 6.2.0", "product": { "name": "Oracle Communications 6.2.0", "product_id": "T028683", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:6.2.0" } } }, { "category": "product_name", "name": "Oracle Communications 5.1", "product": { "name": "Oracle Communications 5.1", "product_id": "T028684", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:5.1" } } }, { "category": "product_name", "name": "Oracle Communications 9.1.1.5.0", "product": { "name": "Oracle Communications 9.1.1.5.0", "product_id": "T028685", "product_identification_helper": { "cpe": "cpe:/a:oracle:communications:9.1.1.5.0" } } } ], "category": "product_name", "name": "Communications" } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-30861", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-30861" }, { "cve": "CVE-2023-29007", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-29007" }, { "cve": "CVE-2023-28856", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-28856" }, { "cve": "CVE-2023-28708", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-28708" }, { "cve": "CVE-2023-28484", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-28484" }, { "cve": "CVE-2023-27901", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-27901" }, { "cve": "CVE-2023-26049", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-26049" }, { "cve": "CVE-2023-25194", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-25194" }, { "cve": "CVE-2023-24998", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-24998" }, { "cve": "CVE-2023-23931", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-23931" }, { "cve": "CVE-2023-22809", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-22809" }, { "cve": "CVE-2023-21971", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-21971" }, { "cve": "CVE-2023-20873", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-20873" }, { "cve": "CVE-2023-20863", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-20863" }, { "cve": "CVE-2023-20862", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-20862" }, { "cve": "CVE-2023-20861", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-20861" }, { "cve": "CVE-2023-1999", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-1999" }, { "cve": "CVE-2023-1436", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-1436" }, { "cve": "CVE-2023-1370", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-1370" }, { "cve": "CVE-2023-0767", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-0767" }, { "cve": "CVE-2023-0361", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-0361" }, { "cve": "CVE-2023-0286", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-0286" }, { "cve": "CVE-2023-0215", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2023-0215" }, { "cve": "CVE-2022-45787", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-45787" }, { "cve": "CVE-2022-45688", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-45688" }, { "cve": "CVE-2022-45061", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-45061" }, { "cve": "CVE-2022-4450", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-4450" }, { "cve": "CVE-2022-42898", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-42898" }, { "cve": "CVE-2022-41881", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-41881" }, { "cve": "CVE-2022-37434", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-37434" }, { "cve": "CVE-2022-36944", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-36944" }, { "cve": "CVE-2022-2963", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-2963" }, { "cve": "CVE-2022-25147", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-25147" }, { "cve": "CVE-2022-1471", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2022-1471" }, { "cve": "CVE-2021-40528", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2021-40528" }, { "cve": "CVE-2021-25220", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2021-25220" }, { "cve": "CVE-2020-10735", "notes": [ { "category": "description", "text": "In Oracle Communications existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer oder authentisierter Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "T028682", "T028683", "T028680", "T028681", "T025869", "T002207", "T025865", "T021645", "T027329", "T027326", "T024970", "T024981", "T027327", "T028684", "T028685" ] }, "release_date": "2023-07-18T22:00:00Z", "title": "CVE-2020-10735" } ] }
wid-sec-w-2023-1072
Vulnerability from csaf_certbund
Published
2023-04-25 22:00
Modified
2023-12-27 23:00
Summary
git: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Git ist eine freie Software zur verteilten Versionsverwaltung von Dateien.
Angriff
Ein Angreifer kann mehrere Schwachstellen in git ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und seine Privilegien zu erweitern.
Betroffene Betriebssysteme
- Windows
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Git ist eine freie Software zur verteilten Versionsverwaltung von Dateien.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann mehrere Schwachstellen in git ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren und seine Privilegien zu erweitern.", "title": "Angriff" }, { "category": "general", "text": "- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1072 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1072.json" }, { "category": "self", "summary": "WID-SEC-2023-1072 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1072" }, { "category": "external", "summary": "OSS Seclist.org Vulnerability Description vom 2023-04-25", "url": "https://seclists.org/oss-sec/2023/q2/104" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2038-1 vom 2023-04-26", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-April/014591.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2062-1 vom 2023-04-28", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-April/014673.html" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6050-1 vom 2023-05-01", "url": "https://ubuntu.com/security/notices/USN-6050-1" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2038-2 vom 2023-05-02", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014719.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2081-1 vom 2023-05-08", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-May/014775.html" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6050-2 vom 2023-05-17", "url": "https://ubuntu.com/security/notices/USN-6050-2" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3192 vom 2023-05-17", "url": "https://access.redhat.com/errata/RHSA-2023:3192" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3248 vom 2023-05-22", "url": "https://access.redhat.com/errata/RHSA-2023:3248" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3247 vom 2023-05-22", "url": "https://access.redhat.com/errata/RHSA-2023:3247" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3246 vom 2023-05-22", "url": "https://access.redhat.com/errata/RHSA-2023:3246" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3245 vom 2023-05-22", "url": "https://access.redhat.com/errata/RHSA-2023:3245" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3243 vom 2023-05-22", "url": "https://access.redhat.com/errata/RHSA-2023:3243" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-3245 vom 2023-05-23", "url": "http://linux.oracle.com/errata/ELSA-2023-3245.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3263 vom 2023-05-23", "url": "https://access.redhat.com/errata/RHSA-2023:3263" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3280 vom 2023-05-23", "url": "https://access.redhat.com/errata/RHSA-2023:3280" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-3263 vom 2023-05-24", "url": "http://linux.oracle.com/errata/ELSA-2023-3263.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-3246 vom 2023-05-26", "url": "http://linux.oracle.com/errata/ELSA-2023-3246.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3287 vom 2023-06-03", "url": "https://access.redhat.com/errata/RHSA-2023:3287" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3382 vom 2023-06-03", "url": "https://access.redhat.com/errata/RHSA-2023:3382" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3362 vom 2023-06-07", "url": "https://access.redhat.com/errata/RHSA-2023:3363" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS2-2023-2072 vom 2023-06-08", "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-2072.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3410 vom 2023-06-08", "url": "https://access.redhat.com/errata/RHSA-2023:3410" }, { "category": "external", "summary": "CentOS Security Advisory CESA-2023:3263 vom 2023-07-28", "url": "https://lists.centos.org/pipermail/centos-announce/2023-July/086408.html" }, { "category": "external", "summary": "Dell Security Advisory DSA-2023-317 vom 2023-11-13", "url": "https://www.dell.com/support/kbdoc/de-de/000219148/dsa-2023-317-security-update-for-dell-networker-vproxy-multiple-linux-packages-vulnerabilities" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2023-2C851F43BA vom 2023-11-14", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-2c851f43ba" }, { "category": "external", "summary": "Gentoo Linux Security Advisory GLSA-202312-15 vom 2023-12-27", "url": "https://security.gentoo.org/glsa/202312-15" } ], "source_lang": "en-US", "title": "git: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-12-27T23:00:00.000+00:00", "generator": { "date": "2024-02-15T17:25:43.260+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-1072", "initial_release_date": "2023-04-25T22:00:00.000+00:00", "revision_history": [ { "date": "2023-04-25T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-04-26T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2023-05-01T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von SUSE und Ubuntu aufgenommen" }, { "date": "2023-05-02T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2023-05-08T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2023-05-18T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Ubuntu und Red Hat aufgenommen" }, { "date": "2023-05-21T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-05-23T22:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen" }, { "date": "2023-05-25T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2023-06-04T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-06-08T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Red Hat und Amazon aufgenommen" }, { "date": "2023-07-30T22:00:00.000+00:00", "number": "12", "summary": "Neue Updates von CentOS aufgenommen" }, { "date": "2023-11-12T23:00:00.000+00:00", "number": "13", "summary": "Neue Updates von Dell aufgenommen" }, { "date": "2023-11-14T23:00:00.000+00:00", "number": "14", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2023-12-27T23:00:00.000+00:00", "number": "15", "summary": "Neue Updates von Gentoo aufgenommen" } ], "status": "final", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "398363", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Dell NetWorker \u003c vproxy 19.9.0.2", "product": { "name": "Dell NetWorker \u003c vproxy 19.9.0.2", "product_id": "T030173", "product_identification_helper": { "cpe": "cpe:/a:dell:networker:vproxy_19.9.0.2" } } }, { "category": "product_name", "name": "Dell NetWorker \u003c vproxy 19.8.0.3", "product": { "name": "Dell NetWorker \u003c vproxy 19.8.0.3", "product_id": "T030174", "product_identification_helper": { "cpe": "cpe:/a:dell:networker:vproxy_19.8.0.3" } } } ], "category": "product_name", "name": "NetWorker" } ], "category": "vendor", "name": "Dell" }, { "branches": [ { "category": "product_name", "name": "Fedora Linux", "product": { "name": "Fedora Linux", "product_id": "74185", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "category": "product_name", "name": "Gentoo Linux", "product": { "name": "Gentoo Linux", "product_id": "T012167", "product_identification_helper": { "cpe": "cpe:/o:gentoo:linux:-" } } } ], "category": "vendor", "name": "Gentoo" }, { "branches": [ { "category": "product_name", "name": "Open Source CentOS", "product": { "name": "Open Source CentOS", "product_id": "1727", "product_identification_helper": { "cpe": "cpe:/o:centos:centos:-" } } }, { "branches": [ { "category": "product_name", "name": "Open Source git \u003c 2.40.1", "product": { "name": "Open Source git \u003c 2.40.1", "product_id": "T027504", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.40.1" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.39.3", "product": { "name": "Open Source git \u003c 2.39.3", "product_id": "T027505", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.39.3" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.38.5", "product": { "name": "Open Source git \u003c 2.38.5", "product_id": "T027506", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.38.5" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.37.7", "product": { "name": "Open Source git \u003c 2.37.7", "product_id": "T027507", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.37.7" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.36.6", "product": { "name": "Open Source git \u003c 2.36.6", "product_id": "T027508", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.36.6" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.35.8", "product": { "name": "Open Source git \u003c 2.35.8", "product_id": "T027509", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.35.8" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.34.8", "product": { "name": "Open Source git \u003c 2.34.8", "product_id": "T027510", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.34.8" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.33.8", "product": { "name": "Open Source git \u003c 2.33.8", "product_id": "T027511", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.33.8" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.32.7", "product": { "name": "Open Source git \u003c 2.32.7", "product_id": "T027512", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.32.7" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.31.8", "product": { "name": "Open Source git \u003c 2.31.8", "product_id": "T027513", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.31.8" } } }, { "category": "product_name", "name": "Open Source git \u003c 2.30.9", "product": { "name": "Open Source git \u003c 2.30.9", "product_id": "T027514", "product_identification_helper": { "cpe": "cpe:/a:open_source:git:2.30.9" } } } ], "category": "product_name", "name": "git" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-29012", "notes": [ { "category": "description", "text": "Es existiert eine Schwachstelle in git. Der Fehler besteht aufgrund einer unsicheren Implementierung der Git CMD-Funktion. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, indem er eine b\u00f6sartige Datei platziert und das Opfer dazu bringt, den CMD-Befehl in dem Verzeichnis auszuf\u00fchren, um die Sicherheitsma\u00dfnahmen zu umgehen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T002207", "67646", "T000126", "398363", "T012167", "1727", "T004914", "T030174", "T030173", "74185" ] }, "release_date": "2023-04-25T22:00:00Z", "title": "CVE-2023-29012" }, { "cve": "CVE-2023-29007", "notes": [ { "category": "description", "text": "In git existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund einer unzureichenden Eingabevalidierung im \"git submodule deinit\" und in der Art und Weise, wie Git lokalisierte Nachrichten verarbeitet. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um die Git-Konfiguration zu manipulieren oder dem Benutzer eine b\u00f6sartige Nachricht anzuzeigen. Das erfolgreiche Ausnutzen einer dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T002207", "67646", "T000126", "398363", "T012167", "1727", "T004914", "T030174", "T030173", "74185" ] }, "release_date": "2023-04-25T22:00:00Z", "title": "CVE-2023-29007" }, { "cve": "CVE-2023-25815", "notes": [ { "category": "description", "text": "In git existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund einer unzureichenden Eingabevalidierung im \"git submodule deinit\" und in der Art und Weise, wie Git lokalisierte Nachrichten verarbeitet. Ein entfernter, anonymer oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um die Git-Konfiguration zu manipulieren oder dem Benutzer eine b\u00f6sartige Nachricht anzuzeigen. Das erfolgreiche Ausnutzen einer dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "T002207", "67646", "T000126", "398363", "T012167", "1727", "T004914", "T030174", "T030173", "74185" ] }, "release_date": "2023-04-25T22:00:00Z", "title": "CVE-2023-25815" }, { "cve": "CVE-2023-29011", "notes": [ { "category": "description", "text": "In git existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund eines Symlink-Following-Problems in \"git apply --reject\" und der Verwendung eines fest kodierten Suchpfads f\u00fcr die connect.exe-Bin\u00e4rdatei, die zur Ausf\u00fchrung des SOCKS5-Proxys verwendet wird. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern." } ], "product_status": { "known_affected": [ "T002207", "67646", "T000126", "398363", "T012167", "1727", "T004914", "T030174", "T030173", "74185" ] }, "release_date": "2023-04-25T22:00:00Z", "title": "CVE-2023-29011" }, { "cve": "CVE-2023-25652", "notes": [ { "category": "description", "text": "In git existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund eines Symlink-Following-Problems in \"git apply --reject\" und der Verwendung eines fest kodierten Suchpfads f\u00fcr die connect.exe-Bin\u00e4rdatei, die zur Ausf\u00fchrung des SOCKS5-Proxys verwendet wird. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern." } ], "product_status": { "known_affected": [ "T002207", "67646", "T000126", "398363", "T012167", "1727", "T004914", "T030174", "T030173", "74185" ] }, "release_date": "2023-04-25T22:00:00Z", "title": "CVE-2023-25652" } ] }
wid-sec-w-2024-0794
Vulnerability from csaf_certbund
Published
2024-04-04 22:00
Modified
2024-04-04 22:00
Summary
Dell ECS: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Dell ECS ist ein Objektspeichersystem.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.
Betroffene Betriebssysteme
- Linux
- UNIX
- Windows
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Dell ECS ist ein Objektspeichersystem.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann mehrere Schwachstellen in Dell ECS ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- UNIX\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2024-0794 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0794.json" }, { "category": "self", "summary": "WID-SEC-2024-0794 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0794" }, { "category": "external", "summary": "Dell Security Advisory DSA-2024-141 vom 2024-04-04", "url": "https://www.dell.com/support/kbdoc/000223839/dsa-2024-=" } ], "source_lang": "en-US", "title": "Dell ECS: Mehrere Schwachstellen", "tracking": { "current_release_date": "2024-04-04T22:00:00.000+00:00", "generator": { "date": "2024-04-05T09:37:24.604+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2024-0794", "initial_release_date": "2024-04-04T22:00:00.000+00:00", "revision_history": [ { "date": "2024-04-04T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c 3.8.1.0", "product": { "name": "Dell ECS \u003c 3.8.1.0", "product_id": "T033919", "product_identification_helper": { "cpe": "cpe:/h:dell:ecs:3.8.1.0" } } } ], "category": "product_name", "name": "ECS" } ], "category": "vendor", "name": "Dell" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-18074", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2018-18074" }, { "cve": "CVE-2020-10663", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-10663" }, { "cve": "CVE-2020-10672", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-10672" }, { "cve": "CVE-2020-10673", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-10673" }, { "cve": "CVE-2020-10735", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-10735" }, { "cve": "CVE-2020-10968", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-10968" }, { "cve": "CVE-2020-10969", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-10969" }, { "cve": "CVE-2020-11111", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-11111" }, { "cve": "CVE-2020-11112", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-11112" }, { "cve": "CVE-2020-11113", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-11113" }, { "cve": "CVE-2020-11612", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-11612" }, { "cve": "CVE-2020-11619", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-11619" }, { "cve": "CVE-2020-11620", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-11620" }, { "cve": "CVE-2020-11979", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-11979" }, { "cve": "CVE-2020-12762", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-12762" }, { "cve": "CVE-2020-12825", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-12825" }, { "cve": "CVE-2020-13956", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-13956" }, { "cve": "CVE-2020-14060", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-14060" }, { "cve": "CVE-2020-14061", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-14061" }, { "cve": "CVE-2020-14062", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-14062" }, { "cve": "CVE-2020-14195", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-14195" }, { "cve": "CVE-2020-15250", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-15250" }, { "cve": "CVE-2020-1945", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-1945" }, { "cve": "CVE-2020-1967", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-1967" }, { "cve": "CVE-2020-1971", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-1971" }, { "cve": "CVE-2020-24616", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-24616" }, { "cve": "CVE-2020-24750", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-24750" }, { "cve": "CVE-2020-25649", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-25649" }, { "cve": "CVE-2020-25658", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-25658" }, { "cve": "CVE-2020-26116", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-26116" }, { "cve": "CVE-2020-26137", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-26137" }, { "cve": "CVE-2020-26541", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-26541" }, { "cve": "CVE-2020-27216", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-27216" }, { "cve": "CVE-2020-27218", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-27218" }, { "cve": "CVE-2020-27223", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-27223" }, { "cve": "CVE-2020-28366", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-28366" }, { "cve": "CVE-2020-28493", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-28493" }, { "cve": "CVE-2020-29509", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-29509" }, { "cve": "CVE-2020-29511", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-29511" }, { "cve": "CVE-2020-29582", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-29582" }, { "cve": "CVE-2020-29651", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-29651" }, { "cve": "CVE-2020-35490", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-35490" }, { "cve": "CVE-2020-35491", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-35491" }, { "cve": "CVE-2020-35728", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-35728" }, { "cve": "CVE-2020-36179", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36179" }, { "cve": "CVE-2020-36180", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36180" }, { "cve": "CVE-2020-36181", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36181" }, { "cve": "CVE-2020-36182", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36182" }, { "cve": "CVE-2020-36183", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36183" }, { "cve": "CVE-2020-36184", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36184" }, { "cve": "CVE-2020-36185", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36185" }, { "cve": "CVE-2020-36186", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36186" }, { "cve": "CVE-2020-36187", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36187" }, { "cve": "CVE-2020-36188", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36188" }, { "cve": "CVE-2020-36189", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36189" }, { "cve": "CVE-2020-36516", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36516" }, { "cve": "CVE-2020-36518", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36518" }, { "cve": "CVE-2020-36557", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36557" }, { "cve": "CVE-2020-36558", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36558" }, { "cve": "CVE-2020-36691", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-36691" }, { "cve": "CVE-2020-7238", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-7238" }, { "cve": "CVE-2020-8840", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-8840" }, { "cve": "CVE-2020-8908", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-8908" }, { "cve": "CVE-2020-8911", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-8911" }, { "cve": "CVE-2020-8912", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-8912" }, { "cve": "CVE-2020-9488", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-9488" }, { "cve": "CVE-2020-9493", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-9493" }, { "cve": "CVE-2020-9546", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-9546" }, { "cve": "CVE-2020-9547", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-9547" }, { "cve": "CVE-2020-9548", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2020-9548" }, { "cve": "CVE-2021-20190", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-20190" }, { "cve": "CVE-2021-20323", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-20323" }, { "cve": "CVE-2021-21290", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-21290" }, { "cve": "CVE-2021-21295", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-21295" }, { "cve": "CVE-2021-21409", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-21409" }, { "cve": "CVE-2021-23840", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-23840" }, { "cve": "CVE-2021-23841", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-23841" }, { "cve": "CVE-2021-2471", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-2471" }, { "cve": "CVE-2021-25642", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-25642" }, { "cve": "CVE-2021-26341", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-26341" }, { "cve": "CVE-2021-27918", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-27918" }, { "cve": "CVE-2021-28153", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-28153" }, { "cve": "CVE-2021-28165", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-28165" }, { "cve": "CVE-2021-28169", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-28169" }, { "cve": "CVE-2021-28861", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-28861" }, { "cve": "CVE-2021-29425", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-29425" }, { "cve": "CVE-2021-30560", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-30560" }, { "cve": "CVE-2021-3114", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3114" }, { "cve": "CVE-2021-33036", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-33036" }, { "cve": "CVE-2021-33194", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-33194" }, { "cve": "CVE-2021-33195", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-33195" }, { "cve": "CVE-2021-33196", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-33196" }, { "cve": "CVE-2021-33197", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-33197" }, { "cve": "CVE-2021-33503", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-33503" }, { "cve": "CVE-2021-33655", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-33655" }, { "cve": "CVE-2021-33656", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-33656" }, { "cve": "CVE-2021-3424", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3424" }, { "cve": "CVE-2021-34428", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-34428" }, { "cve": "CVE-2021-3449", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3449" }, { "cve": "CVE-2021-3450", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3450" }, { "cve": "CVE-2021-3530", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3530" }, { "cve": "CVE-2021-36221", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-36221" }, { "cve": "CVE-2021-36373", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-36373" }, { "cve": "CVE-2021-36374", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-36374" }, { "cve": "CVE-2021-3648", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3648" }, { "cve": "CVE-2021-36690", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-36690" }, { "cve": "CVE-2021-3711", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3711" }, { "cve": "CVE-2021-3712", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3712" }, { "cve": "CVE-2021-37136", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-37136" }, { "cve": "CVE-2021-37137", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-37137" }, { "cve": "CVE-2021-37404", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-37404" }, { "cve": "CVE-2021-37533", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-37533" }, { "cve": "CVE-2021-3754", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3754" }, { "cve": "CVE-2021-3778", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3778" }, { "cve": "CVE-2021-3796", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3796" }, { "cve": "CVE-2021-3826", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3826" }, { "cve": "CVE-2021-3827", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3827" }, { "cve": "CVE-2021-38297", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-38297" }, { "cve": "CVE-2021-3872", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3872" }, { "cve": "CVE-2021-3875", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3875" }, { "cve": "CVE-2021-3903", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3903" }, { "cve": "CVE-2021-3923", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3923" }, { "cve": "CVE-2021-3927", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3927" }, { "cve": "CVE-2021-3928", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3928" }, { "cve": "CVE-2021-3968", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3968" }, { "cve": "CVE-2021-3973", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3973" }, { "cve": "CVE-2021-3974", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3974" }, { "cve": "CVE-2021-3984", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-3984" }, { "cve": "CVE-2021-4019", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4019" }, { "cve": "CVE-2021-4037", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4037" }, { "cve": "CVE-2021-4069", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4069" }, { "cve": "CVE-2021-4104", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4104" }, { "cve": "CVE-2021-4136", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4136" }, { "cve": "CVE-2021-4157", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4157" }, { "cve": "CVE-2021-4166", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4166" }, { "cve": "CVE-2021-41771", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-41771" }, { "cve": "CVE-2021-4192", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4192" }, { "cve": "CVE-2021-4193", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4193" }, { "cve": "CVE-2021-4203", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-4203" }, { "cve": "CVE-2021-42567", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-42567" }, { "cve": "CVE-2021-43797", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-43797" }, { "cve": "CVE-2021-44531", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-44531" }, { "cve": "CVE-2021-44532", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-44532" }, { "cve": "CVE-2021-44533", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-44533" }, { "cve": "CVE-2021-44716", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-44716" }, { "cve": "CVE-2021-44878", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-44878" }, { "cve": "CVE-2021-45078", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-45078" }, { "cve": "CVE-2021-46195", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-46195" }, { "cve": "CVE-2021-46828", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-46828" }, { "cve": "CVE-2021-46848", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2021-46848" }, { "cve": "CVE-2022-0128", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0128" }, { "cve": "CVE-2022-0213", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0213" }, { "cve": "CVE-2022-0225", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0225" }, { "cve": "CVE-2022-0261", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0261" }, { "cve": "CVE-2022-0318", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0318" }, { "cve": "CVE-2022-0319", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0319" }, { "cve": "CVE-2022-0351", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0351" }, { "cve": "CVE-2022-0359", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0359" }, { "cve": "CVE-2022-0361", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0361" }, { "cve": "CVE-2022-0392", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0392" }, { "cve": "CVE-2022-0407", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0407" }, { "cve": "CVE-2022-0413", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0413" }, { "cve": "CVE-2022-0561", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0561" }, { "cve": "CVE-2022-0696", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0696" }, { "cve": "CVE-2022-0778", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-0778" }, { "cve": "CVE-2022-1184", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1184" }, { "cve": "CVE-2022-1245", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1245" }, { "cve": "CVE-2022-1271", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1271" }, { "cve": "CVE-2022-1292", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1292" }, { "cve": "CVE-2022-1381", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1381" }, { "cve": "CVE-2022-1420", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1420" }, { "cve": "CVE-2022-1462", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1462" }, { "cve": "CVE-2022-1466", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1466" }, { "cve": "CVE-2022-1471", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1471" }, { "cve": "CVE-2022-1586", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1586" }, { "cve": "CVE-2022-1587", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1587" }, { "cve": "CVE-2022-1616", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1616" }, { "cve": "CVE-2022-1619", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1619" }, { "cve": "CVE-2022-1620", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1620" }, { "cve": "CVE-2022-1679", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1679" }, { "cve": "CVE-2022-1705", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1705" }, { "cve": "CVE-2022-1720", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1720" }, { "cve": "CVE-2022-1729", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1729" }, { "cve": "CVE-2022-1733", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1733" }, { "cve": "CVE-2022-1735", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1735" }, { "cve": "CVE-2022-1771", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1771" }, { "cve": "CVE-2022-1785", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1785" }, { "cve": "CVE-2022-1796", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1796" }, { "cve": "CVE-2022-1851", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1851" }, { "cve": "CVE-2022-1897", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1897" }, { "cve": "CVE-2022-1898", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1898" }, { "cve": "CVE-2022-1927", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1927" }, { "cve": "CVE-2022-1962", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1962" }, { "cve": "CVE-2022-1968", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1968" }, { "cve": "CVE-2022-1974", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1974" }, { "cve": "CVE-2022-1975", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-1975" }, { "cve": "CVE-2022-20132", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-20132" }, { "cve": "CVE-2022-20141", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-20141" }, { "cve": "CVE-2022-20154", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-20154" }, { "cve": "CVE-2022-20166", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-20166" }, { "cve": "CVE-2022-20368", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-20368" }, { "cve": "CVE-2022-20369", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-20369" }, { "cve": "CVE-2022-2047", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2047" }, { "cve": "CVE-2022-2048", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2048" }, { "cve": "CVE-2022-20567", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-20567" }, { "cve": "CVE-2022-2068", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2068" }, { "cve": "CVE-2022-2097", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2097" }, { "cve": "CVE-2022-21216", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21216" }, { "cve": "CVE-2022-21233", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21233" }, { "cve": "CVE-2022-2124", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2124" }, { "cve": "CVE-2022-2125", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2125" }, { "cve": "CVE-2022-2126", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2126" }, { "cve": "CVE-2022-2129", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2129" }, { "cve": "CVE-2022-21363", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21363" }, { "cve": "CVE-2022-21385", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21385" }, { "cve": "CVE-2022-21499", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21499" }, { "cve": "CVE-2022-2153", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2153" }, { "cve": "CVE-2022-21540", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21540" }, { "cve": "CVE-2022-21541", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21541" }, { "cve": "CVE-2022-21549", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21549" }, { "cve": "CVE-2022-21618", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21618" }, { "cve": "CVE-2022-21619", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21619" }, { "cve": "CVE-2022-21624", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21624" }, { "cve": "CVE-2022-21626", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21626" }, { "cve": "CVE-2022-21628", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21628" }, { "cve": "CVE-2022-21702", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-21702" }, { "cve": "CVE-2022-2175", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2175" }, { "cve": "CVE-2022-2182", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2182" }, { "cve": "CVE-2022-2183", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2183" }, { "cve": "CVE-2022-2206", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2206" }, { "cve": "CVE-2022-2207", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2207" }, { "cve": "CVE-2022-2208", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2208" }, { "cve": "CVE-2022-2210", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2210" }, { "cve": "CVE-2022-2231", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2231" }, { "cve": "CVE-2022-2256", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2256" }, { "cve": "CVE-2022-2257", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2257" }, { "cve": "CVE-2022-2264", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2264" }, { "cve": "CVE-2022-2284", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2284" }, { "cve": "CVE-2022-2285", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2285" }, { "cve": "CVE-2022-2286", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2286" }, { "cve": "CVE-2022-2287", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2287" }, { "cve": "CVE-2022-22976", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-22976" }, { "cve": "CVE-2022-22978", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-22978" }, { "cve": "CVE-2022-2304", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2304" }, { "cve": "CVE-2022-2318", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2318" }, { "cve": "CVE-2022-23302", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-23302" }, { "cve": "CVE-2022-23305", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-23305" }, { "cve": "CVE-2022-23307", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-23307" }, { "cve": "CVE-2022-2343", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2343" }, { "cve": "CVE-2022-2344", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2344" }, { "cve": "CVE-2022-2345", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2345" }, { "cve": "CVE-2022-23471", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-23471" }, { "cve": "CVE-2022-23521", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-23521" }, { "cve": "CVE-2022-23772", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-23772" }, { "cve": "CVE-2022-23773", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-23773" }, { "cve": "CVE-2022-24302", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-24302" }, { "cve": "CVE-2022-24329", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-24329" }, { "cve": "CVE-2022-24823", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-24823" }, { "cve": "CVE-2022-24903", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-24903" }, { "cve": "CVE-2022-2503", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2503" }, { "cve": "CVE-2022-25147", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-25147" }, { "cve": "CVE-2022-25168", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-25168" }, { "cve": "CVE-2022-2519", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2519" }, { "cve": "CVE-2022-2520", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2520" }, { "cve": "CVE-2022-2521", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2521" }, { "cve": "CVE-2022-2522", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2522" }, { "cve": "CVE-2022-25647", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-25647" }, { "cve": "CVE-2022-2571", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2571" }, { "cve": "CVE-2022-2580", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2580" }, { "cve": "CVE-2022-2581", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2581" }, { "cve": "CVE-2022-25857", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-25857" }, { "cve": "CVE-2022-2588", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2588" }, { "cve": "CVE-2022-2598", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2598" }, { "cve": "CVE-2022-26148", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-26148" }, { "cve": "CVE-2022-26365", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-26365" }, { "cve": "CVE-2022-26373", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-26373" }, { "cve": "CVE-2022-2639", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2639" }, { "cve": "CVE-2022-26612", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-26612" }, { "cve": "CVE-2022-2663", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2663" }, { "cve": "CVE-2022-27781", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-27781" }, { "cve": "CVE-2022-27782", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-27782" }, { "cve": "CVE-2022-27943", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-27943" }, { "cve": "CVE-2022-2795", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2795" }, { "cve": "CVE-2022-28131", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-28131" }, { "cve": "CVE-2022-2816", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2816" }, { "cve": "CVE-2022-2817", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2817" }, { "cve": "CVE-2022-2819", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2819" }, { "cve": "CVE-2022-28327", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-28327" }, { "cve": "CVE-2022-2845", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2845" }, { "cve": "CVE-2022-2849", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2849" }, { "cve": "CVE-2022-2862", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2862" }, { "cve": "CVE-2022-2867", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2867" }, { "cve": "CVE-2022-2868", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2868" }, { "cve": "CVE-2022-2869", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2869" }, { "cve": "CVE-2022-28693", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-28693" }, { "cve": "CVE-2022-2874", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2874" }, { "cve": "CVE-2022-28748", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-28748" }, { "cve": "CVE-2022-2880", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2880" }, { "cve": "CVE-2022-2889", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2889" }, { "cve": "CVE-2022-29162", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-29162" }, { "cve": "CVE-2022-29187", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-29187" }, { "cve": "CVE-2022-2923", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2923" }, { "cve": "CVE-2022-2946", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2946" }, { "cve": "CVE-2022-29526", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-29526" }, { "cve": "CVE-2022-29583", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-29583" }, { "cve": "CVE-2022-2964", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2964" }, { "cve": "CVE-2022-2977", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2977" }, { "cve": "CVE-2022-2980", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2980" }, { "cve": "CVE-2022-2982", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2982" }, { "cve": "CVE-2022-29900", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-29900" }, { "cve": "CVE-2022-29901", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-29901" }, { "cve": "CVE-2022-2991", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-2991" }, { "cve": "CVE-2022-3016", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3016" }, { "cve": "CVE-2022-3028", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3028" }, { "cve": "CVE-2022-3037", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3037" }, { "cve": "CVE-2022-30580", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-30580" }, { "cve": "CVE-2022-30630", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-30630" }, { "cve": "CVE-2022-30631", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-30631" }, { "cve": "CVE-2022-30632", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-30632" }, { "cve": "CVE-2022-30633", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-30633" }, { "cve": "CVE-2022-3099", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3099" }, { "cve": "CVE-2022-31030", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-31030" }, { "cve": "CVE-2022-31159", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-31159" }, { "cve": "CVE-2022-3134", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3134" }, { "cve": "CVE-2022-3153", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3153" }, { "cve": "CVE-2022-3169", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3169" }, { "cve": "CVE-2022-31690", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-31690" }, { "cve": "CVE-2022-32148", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-32148" }, { "cve": "CVE-2022-32149", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-32149" }, { "cve": "CVE-2022-32206", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-32206" }, { "cve": "CVE-2022-32208", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-32208" }, { "cve": "CVE-2022-32221", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-32221" }, { "cve": "CVE-2022-3234", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3234" }, { "cve": "CVE-2022-3235", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3235" }, { "cve": "CVE-2022-3239", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3239" }, { "cve": "CVE-2022-3278", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3278" }, { "cve": "CVE-2022-3296", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3296" }, { "cve": "CVE-2022-3297", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3297" }, { "cve": "CVE-2022-33196", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-33196" }, { "cve": "CVE-2022-3324", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3324" }, { "cve": "CVE-2022-3352", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3352" }, { "cve": "CVE-2022-33740", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-33740" }, { "cve": "CVE-2022-33741", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-33741" }, { "cve": "CVE-2022-33742", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-33742" }, { "cve": "CVE-2022-33972", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-33972" }, { "cve": "CVE-2022-33981", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-33981" }, { "cve": "CVE-2022-34169", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-34169" }, { "cve": "CVE-2022-3424", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3424" }, { "cve": "CVE-2022-34266", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-34266" }, { "cve": "CVE-2022-34526", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-34526" }, { "cve": "CVE-2022-34903", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-34903" }, { "cve": "CVE-2022-3491", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3491" }, { "cve": "CVE-2022-3515", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3515" }, { "cve": "CVE-2022-3520", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3520" }, { "cve": "CVE-2022-3521", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3521" }, { "cve": "CVE-2022-3524", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3524" }, { "cve": "CVE-2022-35252", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-35252" }, { "cve": "CVE-2022-3542", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3542" }, { "cve": "CVE-2022-3545", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3545" }, { "cve": "CVE-2022-3564", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3564" }, { "cve": "CVE-2022-3565", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3565" }, { "cve": "CVE-2022-3566", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3566" }, { "cve": "CVE-2022-3567", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3567" }, { "cve": "CVE-2022-35737", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-35737" }, { "cve": "CVE-2022-3586", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3586" }, { "cve": "CVE-2022-3591", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3591" }, { "cve": "CVE-2022-3594", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3594" }, { "cve": "CVE-2022-3597", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3597" }, { "cve": "CVE-2022-3599", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3599" }, { "cve": "CVE-2022-36109", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-36109" }, { "cve": "CVE-2022-3621", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3621" }, { "cve": "CVE-2022-3626", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3626" }, { "cve": "CVE-2022-3627", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3627" }, { "cve": "CVE-2022-3628", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3628" }, { "cve": "CVE-2022-36280", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-36280" }, { "cve": "CVE-2022-3629", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3629" }, { "cve": "CVE-2022-3635", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3635" }, { "cve": "CVE-2022-3643", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3643" }, { "cve": "CVE-2022-36437", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-36437" }, { "cve": "CVE-2022-3646", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3646" }, { "cve": "CVE-2022-3649", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3649" }, { "cve": "CVE-2022-36760", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-36760" }, { "cve": "CVE-2022-36879", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-36879" }, { "cve": "CVE-2022-36946", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-36946" }, { "cve": "CVE-2022-3705", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3705" }, { "cve": "CVE-2022-37434", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-37434" }, { "cve": "CVE-2022-37436", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-37436" }, { "cve": "CVE-2022-37865", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-37865" }, { "cve": "CVE-2022-37866", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-37866" }, { "cve": "CVE-2022-38090", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38090" }, { "cve": "CVE-2022-38096", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38096" }, { "cve": "CVE-2022-38126", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38126" }, { "cve": "CVE-2022-38127", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38127" }, { "cve": "CVE-2022-38177", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38177" }, { "cve": "CVE-2022-38178", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38178" }, { "cve": "CVE-2022-3821", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3821" }, { "cve": "CVE-2022-38533", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38533" }, { "cve": "CVE-2022-38749", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38749" }, { "cve": "CVE-2022-38750", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38750" }, { "cve": "CVE-2022-38751", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38751" }, { "cve": "CVE-2022-38752", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-38752" }, { "cve": "CVE-2022-39028", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-39028" }, { "cve": "CVE-2022-3903", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3903" }, { "cve": "CVE-2022-39188", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-39188" }, { "cve": "CVE-2022-39399", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-39399" }, { "cve": "CVE-2022-3970", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-3970" }, { "cve": "CVE-2022-40149", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40149" }, { "cve": "CVE-2022-40150", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40150" }, { "cve": "CVE-2022-40151", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40151" }, { "cve": "CVE-2022-40152", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40152" }, { "cve": "CVE-2022-40153", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40153" }, { "cve": "CVE-2022-40303", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40303" }, { "cve": "CVE-2022-40304", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40304" }, { "cve": "CVE-2022-40307", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40307" }, { "cve": "CVE-2022-40674", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40674" }, { "cve": "CVE-2022-40768", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40768" }, { "cve": "CVE-2022-40899", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-40899" }, { "cve": "CVE-2022-4095", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4095" }, { "cve": "CVE-2022-41218", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41218" }, { "cve": "CVE-2022-4129", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4129" }, { "cve": "CVE-2022-4141", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4141" }, { "cve": "CVE-2022-41717", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41717" }, { "cve": "CVE-2022-41721", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41721" }, { "cve": "CVE-2022-41848", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41848" }, { "cve": "CVE-2022-41850", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41850" }, { "cve": "CVE-2022-41854", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41854" }, { "cve": "CVE-2022-41858", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41858" }, { "cve": "CVE-2022-41881", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41881" }, { "cve": "CVE-2022-41903", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41903" }, { "cve": "CVE-2022-41915", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41915" }, { "cve": "CVE-2022-41966", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41966" }, { "cve": "CVE-2022-41974", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-41974" }, { "cve": "CVE-2022-42003", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42003" }, { "cve": "CVE-2022-42004", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42004" }, { "cve": "CVE-2022-42010", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42010" }, { "cve": "CVE-2022-42011", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42011" }, { "cve": "CVE-2022-42012", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42012" }, { "cve": "CVE-2022-42328", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42328" }, { "cve": "CVE-2022-42329", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42329" }, { "cve": "CVE-2022-42703", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42703" }, { "cve": "CVE-2022-42889", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42889" }, { "cve": "CVE-2022-42895", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42895" }, { "cve": "CVE-2022-42896", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42896" }, { "cve": "CVE-2022-42898", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42898" }, { "cve": "CVE-2022-4292", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4292" }, { "cve": "CVE-2022-4293", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4293" }, { "cve": "CVE-2022-42969", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-42969" }, { "cve": "CVE-2022-4304", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4304" }, { "cve": "CVE-2022-43552", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-43552" }, { "cve": "CVE-2022-43680", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-43680" }, { "cve": "CVE-2022-43750", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-43750" }, { "cve": "CVE-2022-4378", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4378" }, { "cve": "CVE-2022-43945", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-43945" }, { "cve": "CVE-2022-43995", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-43995" }, { "cve": "CVE-2022-4415", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4415" }, { "cve": "CVE-2022-4450", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4450" }, { "cve": "CVE-2022-44638", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-44638" }, { "cve": "CVE-2022-45061", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-45061" }, { "cve": "CVE-2022-45688", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-45688" }, { "cve": "CVE-2022-45884", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-45884" }, { "cve": "CVE-2022-45885", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-45885" }, { "cve": "CVE-2022-45886", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-45886" }, { "cve": "CVE-2022-45887", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-45887" }, { "cve": "CVE-2022-45919", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-45919" }, { "cve": "CVE-2022-45934", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-45934" }, { "cve": "CVE-2022-45939", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-45939" }, { "cve": "CVE-2022-4662", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-4662" }, { "cve": "CVE-2022-46751", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-46751" }, { "cve": "CVE-2022-46908", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-46908" }, { "cve": "CVE-2022-47629", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-47629" }, { "cve": "CVE-2022-47929", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-47929" }, { "cve": "CVE-2022-48281", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-48281" }, { "cve": "CVE-2022-48337", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-48337" }, { "cve": "CVE-2022-48339", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2022-48339" }, { "cve": "CVE-2023-0045", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0045" }, { "cve": "CVE-2023-0049", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0049" }, { "cve": "CVE-2023-0051", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0051" }, { "cve": "CVE-2023-0054", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0054" }, { "cve": "CVE-2023-0215", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0215" }, { "cve": "CVE-2023-0286", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0286" }, { "cve": "CVE-2023-0288", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0288" }, { "cve": "CVE-2023-0433", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0433" }, { "cve": "CVE-2023-0464", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0464" }, { "cve": "CVE-2023-0465", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0465" }, { "cve": "CVE-2023-0466", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0466" }, { "cve": "CVE-2023-0512", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0512" }, { "cve": "CVE-2023-0590", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0590" }, { "cve": "CVE-2023-0597", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0597" }, { "cve": "CVE-2023-0833", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-0833" }, { "cve": "CVE-2023-1076", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1076" }, { "cve": "CVE-2023-1095", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1095" }, { "cve": "CVE-2023-1118", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1118" }, { "cve": "CVE-2023-1127", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1127" }, { "cve": "CVE-2023-1170", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1170" }, { "cve": "CVE-2023-1175", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1175" }, { "cve": "CVE-2023-1370", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1370" }, { "cve": "CVE-2023-1380", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1380" }, { "cve": "CVE-2023-1390", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1390" }, { "cve": "CVE-2023-1436", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1436" }, { "cve": "CVE-2023-1513", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1513" }, { "cve": "CVE-2023-1611", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1611" }, { "cve": "CVE-2023-1670", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1670" }, { "cve": "CVE-2023-1855", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1855" }, { "cve": "CVE-2023-1989", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1989" }, { "cve": "CVE-2023-1990", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1990" }, { "cve": "CVE-2023-1998", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-1998" }, { "cve": "CVE-2023-20862", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-20862" }, { "cve": "CVE-2023-2124", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2124" }, { "cve": "CVE-2023-2162", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2162" }, { "cve": "CVE-2023-2176", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2176" }, { "cve": "CVE-2023-21830", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21830" }, { "cve": "CVE-2023-21835", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21835" }, { "cve": "CVE-2023-21843", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21843" }, { "cve": "CVE-2023-21930", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21930" }, { "cve": "CVE-2023-21937", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21937" }, { "cve": "CVE-2023-21938", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21938" }, { "cve": "CVE-2023-21939", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21939" }, { "cve": "CVE-2023-2194", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2194" }, { "cve": "CVE-2023-21954", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21954" }, { "cve": "CVE-2023-21967", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21967" }, { "cve": "CVE-2023-21968", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-21968" }, { "cve": "CVE-2023-22490", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-22490" }, { "cve": "CVE-2023-2253", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2253" }, { "cve": "CVE-2023-22809", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-22809" }, { "cve": "CVE-2023-23454", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-23454" }, { "cve": "CVE-2023-23455", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-23455" }, { "cve": "CVE-2023-23559", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-23559" }, { "cve": "CVE-2023-23916", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-23916" }, { "cve": "CVE-2023-23946", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-23946" }, { "cve": "CVE-2023-24329", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-24329" }, { "cve": "CVE-2023-24532", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-24532" }, { "cve": "CVE-2023-24534", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-24534" }, { "cve": "CVE-2023-2483", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2483" }, { "cve": "CVE-2023-24998", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-24998" }, { "cve": "CVE-2023-2513", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2513" }, { "cve": "CVE-2023-25193", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-25193" }, { "cve": "CVE-2023-25652", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-25652" }, { "cve": "CVE-2023-25690", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-25690" }, { "cve": "CVE-2023-25809", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-25809" }, { "cve": "CVE-2023-25815", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-25815" }, { "cve": "CVE-2023-26048", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-26048" }, { "cve": "CVE-2023-26049", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-26049" }, { "cve": "CVE-2023-2650", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2650" }, { "cve": "CVE-2023-26545", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-26545" }, { "cve": "CVE-2023-26604", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-26604" }, { "cve": "CVE-2023-27533", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-27533" }, { "cve": "CVE-2023-27534", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-27534" }, { "cve": "CVE-2023-27535", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-27535" }, { "cve": "CVE-2023-27536", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-27536" }, { "cve": "CVE-2023-27538", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-27538" }, { "cve": "CVE-2023-27561", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-27561" }, { "cve": "CVE-2023-2828", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2828" }, { "cve": "CVE-2023-28320", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28320" }, { "cve": "CVE-2023-28321", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28321" }, { "cve": "CVE-2023-28322", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28322" }, { "cve": "CVE-2023-28328", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28328" }, { "cve": "CVE-2023-28464", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28464" }, { "cve": "CVE-2023-28486", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28486" }, { "cve": "CVE-2023-28487", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28487" }, { "cve": "CVE-2023-28642", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28642" }, { "cve": "CVE-2023-28772", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28772" }, { "cve": "CVE-2023-28840", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28840" }, { "cve": "CVE-2023-28841", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28841" }, { "cve": "CVE-2023-28842", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-28842" }, { "cve": "CVE-2023-29007", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-29007" }, { "cve": "CVE-2023-29383", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-29383" }, { "cve": "CVE-2023-29402", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-29402" }, { "cve": "CVE-2023-29406", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-29406" }, { "cve": "CVE-2023-29409", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-29409" }, { "cve": "CVE-2023-2976", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-2976" }, { "cve": "CVE-2023-30630", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-30630" }, { "cve": "CVE-2023-30772", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-30772" }, { "cve": "CVE-2023-31084", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-31084" }, { "cve": "CVE-2023-3138", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-3138" }, { "cve": "CVE-2023-31436", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-31436" }, { "cve": "CVE-2023-31484", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-31484" }, { "cve": "CVE-2023-32269", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-32269" }, { "cve": "CVE-2023-32697", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-32697" }, { "cve": "CVE-2023-33264", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-33264" }, { "cve": "CVE-2023-34034", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-34034" }, { "cve": "CVE-2023-34035", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-34035" }, { "cve": "CVE-2023-34453", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-34453" }, { "cve": "CVE-2023-34454", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-34454" }, { "cve": "CVE-2023-34455", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-34455" }, { "cve": "CVE-2023-34462", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-34462" }, { "cve": "CVE-2023-35116", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-35116" }, { "cve": "CVE-2023-3635", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-3635" }, { "cve": "CVE-2023-36479", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-36479" }, { "cve": "CVE-2023-39533", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-39533" }, { "cve": "CVE-2023-40167", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-40167" }, { "cve": "CVE-2023-40217", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-40217" }, { "cve": "CVE-2023-41105", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-41105" }, { "cve": "CVE-2023-41900", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-41900" }, { "cve": "CVE-2023-43642", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-43642" }, { "cve": "CVE-2023-43804", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-43804" }, { "cve": "CVE-2023-44487", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-44487" }, { "cve": "CVE-2023-45803", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2023-45803" }, { "cve": "CVE-2024-21626", "notes": [ { "category": "description", "text": "In Dell ECS existieren mehrere Schwachstellen. Diese bestehen in diversen Komponenten von Drittanbietern. Ein Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuf\u00fchren, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuf\u00fchren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuf\u00fchren." } ], "release_date": "2024-04-04T22:00:00Z", "title": "CVE-2024-21626" } ] }
wid-sec-w-2023-2031
Vulnerability from csaf_certbund
Published
2023-08-09 22:00
Modified
2023-11-02 23:00
Summary
Xerox FreeFlow Print Server: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
FreeFlow-Druckserver ist eine Druckserveranwendung für Xerox-Produktionsdrucker, die Flexibilität, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.
Angriff
Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität des Systems zu gefährden.
Betroffene Betriebssysteme
- UNIX
- Windows
- Sonstiges
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "FreeFlow-Druckserver ist eine Druckserveranwendung f\u00fcr Xerox-Produktionsdrucker, die Flexibilit\u00e4t, umfangreiche Workflow-Optionen und eine Farbverwaltung bietet.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden.", "title": "Angriff" }, { "category": "general", "text": "- UNIX\n- Windows\n- Sonstiges", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-2031 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2031.json" }, { "category": "self", "summary": "WID-SEC-2023-2031 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2031" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS2-2023-2331 vom 2023-11-02", "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-2331.html" }, { "category": "external", "summary": "XEROX Security Advisory XRX23-013 vom 2023-08-24", "url": "https://securitydocs.business.xerox.com/wp-content/uploads/2023/08/Xerox-Security-Bulletin-XRX23-013-Xerox%C2%AE-FreeFlow%C2%AE-Print-Server-v9.pdf" }, { "category": "external", "summary": "Xerox Security Bulletin vom 2023-08-09", "url": "https://security.business.xerox.com/wp-content/uploads/2023/08/cert_XRX23-012_FFPSv2_Win10_SecurityBulletin_Aug2023.pdf" }, { "category": "external", "summary": "Xerox Security Bulletin vom 2023-08-09", "url": "https://security.business.xerox.com/wp-content/uploads/2023/08/cert_XRX23-011_FFPSv7-S11_MediaInstall_Aug2023.pdf" } ], "source_lang": "en-US", "title": "Xerox FreeFlow Print Server: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-11-02T23:00:00.000+00:00", "generator": { "date": "2024-02-15T17:40:06.892+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-2031", "initial_release_date": "2023-08-09T22:00:00.000+00:00", "revision_history": [ { "date": "2023-08-09T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-08-24T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von XEROX aufgenommen" }, { "date": "2023-11-02T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Amazon aufgenommen" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "398363", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Xerox FreeFlow Print Server v2", "product": { "name": "Xerox FreeFlow Print Server v2", "product_id": "T014888", "product_identification_helper": { "cpe": "cpe:/a:xerox:freeflow_print_server:v2" } } }, { "category": "product_name", "name": "Xerox FreeFlow Print Server v9", "product": { "name": "Xerox FreeFlow Print Server v9", "product_id": "T015632", "product_identification_helper": { "cpe": "cpe:/a:xerox:freeflow_print_server:v9" } } }, { "category": "product_name", "name": "Xerox FreeFlow Print Server v7 for Solaris", "product": { "name": "Xerox FreeFlow Print Server v7 for Solaris", "product_id": "T029230", "product_identification_helper": { "cpe": "cpe:/a:xerox:freeflow_print_server:v7_for_solaris" } } } ], "category": "product_name", "name": "FreeFlow Print Server" } ], "category": "vendor", "name": "Xerox" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-35365", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35365" }, { "cve": "CVE-2023-35362", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35362" }, { "cve": "CVE-2023-35361", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35361" }, { "cve": "CVE-2023-35360", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35360" }, { "cve": "CVE-2023-35358", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35358" }, { "cve": "CVE-2023-35357", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35357" }, { "cve": "CVE-2023-35356", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35356" }, { "cve": "CVE-2023-35353", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35353" }, { "cve": "CVE-2023-35352", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35352" }, { "cve": "CVE-2023-35342", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35342" }, { "cve": "CVE-2023-35341", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35341" }, { "cve": "CVE-2023-35340", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35340" }, { "cve": "CVE-2023-35339", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35339" }, { "cve": "CVE-2023-35338", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35338" }, { "cve": "CVE-2023-35336", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35336" }, { "cve": "CVE-2023-35332", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35332" }, { "cve": "CVE-2023-35330", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35330" }, { "cve": "CVE-2023-35329", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35329" }, { "cve": "CVE-2023-35328", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35328" }, { "cve": "CVE-2023-35325", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35325" }, { "cve": "CVE-2023-35324", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35324" }, { "cve": "CVE-2023-35320", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35320" }, { "cve": "CVE-2023-35319", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35319" }, { "cve": "CVE-2023-35318", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35318" }, { "cve": "CVE-2023-35316", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35316" }, { "cve": "CVE-2023-35315", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35315" }, { "cve": "CVE-2023-35314", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35314" }, { "cve": "CVE-2023-35313", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35313" }, { "cve": "CVE-2023-35312", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35312" }, { "cve": "CVE-2023-35311", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35311" }, { "cve": "CVE-2023-35309", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35309" }, { "cve": "CVE-2023-35308", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35308" }, { "cve": "CVE-2023-35306", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35306" }, { "cve": "CVE-2023-35305", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35305" }, { "cve": "CVE-2023-35304", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35304" }, { "cve": "CVE-2023-35303", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35303" }, { "cve": "CVE-2023-35302", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35302" }, { "cve": "CVE-2023-35300", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35300" }, { "cve": "CVE-2023-35299", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35299" }, { "cve": "CVE-2023-35297", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35297" }, { "cve": "CVE-2023-35296", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35296" }, { "cve": "CVE-2023-34981", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-34981" }, { "cve": "CVE-2023-3482", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-3482" }, { "cve": "CVE-2023-34417", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-34417" }, { "cve": "CVE-2023-34416", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-34416" }, { "cve": "CVE-2023-34415", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-34415" }, { "cve": "CVE-2023-34414", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-34414" }, { "cve": "CVE-2023-33174", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33174" }, { "cve": "CVE-2023-33173", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33173" }, { "cve": "CVE-2023-33172", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33172" }, { "cve": "CVE-2023-33169", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33169" }, { "cve": "CVE-2023-33168", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33168" }, { "cve": "CVE-2023-33167", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33167" }, { "cve": "CVE-2023-33166", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33166" }, { "cve": "CVE-2023-33164", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33164" }, { "cve": "CVE-2023-33160", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33160" }, { "cve": "CVE-2023-33157", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33157" }, { "cve": "CVE-2023-33154", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33154" }, { "cve": "CVE-2023-33134", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-33134" }, { "cve": "CVE-2023-32324", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32324" }, { "cve": "CVE-2023-32216", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32216" }, { "cve": "CVE-2023-32215", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32215" }, { "cve": "CVE-2023-32214", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32214" }, { "cve": "CVE-2023-32213", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32213" }, { "cve": "CVE-2023-32212", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32212" }, { "cve": "CVE-2023-32211", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32211" }, { "cve": "CVE-2023-32210", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32210" }, { "cve": "CVE-2023-32209", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32209" }, { "cve": "CVE-2023-32208", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32208" }, { "cve": "CVE-2023-32207", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32207" }, { "cve": "CVE-2023-32206", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32206" }, { "cve": "CVE-2023-32205", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32205" }, { "cve": "CVE-2023-32085", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32085" }, { "cve": "CVE-2023-32057", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32057" }, { "cve": "CVE-2023-32055", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32055" }, { "cve": "CVE-2023-32054", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32054" }, { "cve": "CVE-2023-32053", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32053" }, { "cve": "CVE-2023-32049", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32049" }, { "cve": "CVE-2023-32046", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32046" }, { "cve": "CVE-2023-32045", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32045" }, { "cve": "CVE-2023-32044", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32044" }, { "cve": "CVE-2023-32043", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32043" }, { "cve": "CVE-2023-32042", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32042" }, { "cve": "CVE-2023-32041", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32041" }, { "cve": "CVE-2023-32040", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32040" }, { "cve": "CVE-2023-32039", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32039" }, { "cve": "CVE-2023-32038", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32038" }, { "cve": "CVE-2023-32035", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32035" }, { "cve": "CVE-2023-32034", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-32034" }, { "cve": "CVE-2023-31284", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-31284" }, { "cve": "CVE-2023-31047", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-31047" }, { "cve": "CVE-2023-30775", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-30775" }, { "cve": "CVE-2023-30774", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-30774" }, { "cve": "CVE-2023-30608", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-30608" }, { "cve": "CVE-2023-30086", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-30086" }, { "cve": "CVE-2023-29550", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29550" }, { "cve": "CVE-2023-29548", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29548" }, { "cve": "CVE-2023-29545", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29545" }, { "cve": "CVE-2023-29542", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29542" }, { "cve": "CVE-2023-29541", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29541" }, { "cve": "CVE-2023-29539", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29539" }, { "cve": "CVE-2023-29536", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29536" }, { "cve": "CVE-2023-29535", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29535" }, { "cve": "CVE-2023-29533", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29533" }, { "cve": "CVE-2023-29532", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29532" }, { "cve": "CVE-2023-29531", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29531" }, { "cve": "CVE-2023-29479", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29479" }, { "cve": "CVE-2023-29469", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29469" }, { "cve": "CVE-2023-29400", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29400" }, { "cve": "CVE-2023-29007", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-29007" }, { "cve": "CVE-2023-28756", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-28756" }, { "cve": "CVE-2023-28755", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-28755" }, { "cve": "CVE-2023-28709", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-28709" }, { "cve": "CVE-2023-28487", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-28487" }, { "cve": "CVE-2023-28486", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-28486" }, { "cve": "CVE-2023-28484", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-28484" }, { "cve": "CVE-2023-28005", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-28005" }, { "cve": "CVE-2023-27522", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-27522" }, { "cve": "CVE-2023-27320", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-27320" }, { "cve": "CVE-2023-2731", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-2731" }, { "cve": "CVE-2023-26769", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-26769" }, { "cve": "CVE-2023-26768", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-26768" }, { "cve": "CVE-2023-26767", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-26767" }, { "cve": "CVE-2023-25815", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-25815" }, { "cve": "CVE-2023-25690", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-25690" }, { "cve": "CVE-2023-25652", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-25652" }, { "cve": "CVE-2023-25193", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-25193" }, { "cve": "CVE-2023-24998", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24998" }, { "cve": "CVE-2023-24932", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24932" }, { "cve": "CVE-2023-24540", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24540" }, { "cve": "CVE-2023-24539", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24539" }, { "cve": "CVE-2023-24538", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24538" }, { "cve": "CVE-2023-24537", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24537" }, { "cve": "CVE-2023-24536", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24536" }, { "cve": "CVE-2023-24534", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24534" }, { "cve": "CVE-2023-24532", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24532" }, { "cve": "CVE-2023-24021", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-24021" }, { "cve": "CVE-2023-23931", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-23931" }, { "cve": "CVE-2023-22049", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-22049" }, { "cve": "CVE-2023-22045", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-22045" }, { "cve": "CVE-2023-22044", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-22044" }, { "cve": "CVE-2023-22041", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-22041" }, { "cve": "CVE-2023-22036", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-22036" }, { "cve": "CVE-2023-22023", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-22023" }, { "cve": "CVE-2023-22006", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-22006" }, { "cve": "CVE-2023-21995", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21995" }, { "cve": "CVE-2023-21982", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21982" }, { "cve": "CVE-2023-21980", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21980" }, { "cve": "CVE-2023-21977", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21977" }, { "cve": "CVE-2023-21976", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21976" }, { "cve": "CVE-2023-21972", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21972" }, { "cve": "CVE-2023-21966", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21966" }, { "cve": "CVE-2023-21962", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21962" }, { "cve": "CVE-2023-21955", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21955" }, { "cve": "CVE-2023-21953", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21953" }, { "cve": "CVE-2023-21947", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21947" }, { "cve": "CVE-2023-21946", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21946" }, { "cve": "CVE-2023-21945", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21945" }, { "cve": "CVE-2023-21940", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21940" }, { "cve": "CVE-2023-21935", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21935" }, { "cve": "CVE-2023-21933", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21933" }, { "cve": "CVE-2023-21929", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21929" }, { "cve": "CVE-2023-21920", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21920" }, { "cve": "CVE-2023-21919", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21919" }, { "cve": "CVE-2023-21912", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21912" }, { "cve": "CVE-2023-21911", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21911" }, { "cve": "CVE-2023-21756", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21756" }, { "cve": "CVE-2023-21526", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-21526" }, { "cve": "CVE-2023-1999", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-1999" }, { "cve": "CVE-2023-1994", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-1994" }, { "cve": "CVE-2023-1993", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-1993" }, { "cve": "CVE-2023-1992", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-1992" }, { "cve": "CVE-2023-1945", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-1945" }, { "cve": "CVE-2023-1161", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-1161" }, { "cve": "CVE-2023-0547", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-0547" }, { "cve": "CVE-2023-0494", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-0494" }, { "cve": "CVE-2023-0215", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-0215" }, { "cve": "CVE-2023-0002", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-0002" }, { "cve": "CVE-2022-4904", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-4904" }, { "cve": "CVE-2022-4883", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-4883" }, { "cve": "CVE-2022-48303", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-48303" }, { "cve": "CVE-2022-4743", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-4743" }, { "cve": "CVE-2022-46908", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-46908" }, { "cve": "CVE-2022-46663", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-46663" }, { "cve": "CVE-2022-46285", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-46285" }, { "cve": "CVE-2022-44793", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-44793" }, { "cve": "CVE-2022-44792", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-44792" }, { "cve": "CVE-2022-44617", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-44617" }, { "cve": "CVE-2022-43552", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-43552" }, { "cve": "CVE-2022-43551", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-43551" }, { "cve": "CVE-2022-42916", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-42916" }, { "cve": "CVE-2020-23903", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2020-23903" }, { "cve": "CVE-2004-0687", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2004-0687" }, { "cve": "CVE-2023-37212", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37212" }, { "cve": "CVE-2023-37211", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37211" }, { "cve": "CVE-2023-37210", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37210" }, { "cve": "CVE-2023-37209", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37209" }, { "cve": "CVE-2023-37208", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37208" }, { "cve": "CVE-2023-37207", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37207" }, { "cve": "CVE-2023-37206", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37206" }, { "cve": "CVE-2023-37205", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37205" }, { "cve": "CVE-2023-37204", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37204" }, { "cve": "CVE-2023-37203", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37203" }, { "cve": "CVE-2023-37202", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37202" }, { "cve": "CVE-2023-37201", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-37201" }, { "cve": "CVE-2023-36884", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-36884" }, { "cve": "CVE-2023-36874", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-36874" }, { "cve": "CVE-2023-36871", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-36871" }, { "cve": "CVE-2023-3600", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-3600" }, { "cve": "CVE-2023-35367", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35367" }, { "cve": "CVE-2023-35366", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2023-35366" }, { "cve": "CVE-2022-42898", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-42898" }, { "cve": "CVE-2022-41725", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-41725" }, { "cve": "CVE-2022-41724", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-41724" }, { "cve": "CVE-2022-41723", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-41723" }, { "cve": "CVE-2022-41722", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-41722" }, { "cve": "CVE-2022-41720", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-41720" }, { "cve": "CVE-2022-41717", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-41717" }, { "cve": "CVE-2022-41716", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-41716" }, { "cve": "CVE-2022-40897", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-40897" }, { "cve": "CVE-2022-39348", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-39348" }, { "cve": "CVE-2022-37434", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-37434" }, { "cve": "CVE-2022-37290", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-37290" }, { "cve": "CVE-2022-3729", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-3729" }, { "cve": "CVE-2022-33099", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-33099" }, { "cve": "CVE-2022-31783", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-31783" }, { "cve": "CVE-2022-30115", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-30115" }, { "cve": "CVE-2022-28805", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-28805" }, { "cve": "CVE-2022-21617", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-21617" }, { "cve": "CVE-2022-21608", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-21608" }, { "cve": "CVE-2022-21592", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-21592" }, { "cve": "CVE-2022-21589", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-21589" }, { "cve": "CVE-2022-21166", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-21166" }, { "cve": "CVE-2022-21127", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-21127" }, { "cve": "CVE-2022-21125", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-21125" }, { "cve": "CVE-2022-21123", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-21123" }, { "cve": "CVE-2022-2097", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2022-2097" }, { "cve": "CVE-2021-43618", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2021-43618" }, { "cve": "CVE-2021-3618", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2021-3618" }, { "cve": "CVE-2021-3575", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2021-3575" }, { "cve": "CVE-2021-33657", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2021-33657" }, { "cve": "CVE-2021-33621", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2021-33621" }, { "cve": "CVE-2020-23904", "notes": [ { "category": "description", "text": "In Xerox FreeFlow Print Servern mehrerer Versionen existieren mehrere Schwachstellen im Zusammenhang mit bekannten Windows, Java, Apache und Mozilla Firefox Schwachstellen. Ein Angreifer kann diese ausnutzen, um die Vertraulichkeit, Verf\u00fcgbarkeit und Integrit\u00e4t des Systems zu gef\u00e4hrden." } ], "product_status": { "known_affected": [ "T029230", "T014888", "398363", "T015632" ] }, "release_date": "2023-08-09T22:00:00Z", "title": "CVE-2020-23904" } ] }
wid-sec-w-2023-2625
Vulnerability from csaf_certbund
Published
2023-10-10 22:00
Modified
2023-10-10 22:00
Summary
IBM QRadar SIEM: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
IBM QRadar Security Information and Event Management (SIEM) bietet Unterstützung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.
Angriff
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen und einen Cross-Site-Scripting-Angriff durchzuführen.
Betroffene Betriebssysteme
- Linux
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "IBM QRadar Security Information and Event Management (SIEM) bietet Unterst\u00fctzung bei der Erkennung und Priorisierung von Sicherheitsbedrohungen im Unternehmen.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM QRadar SIEM ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-2625 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2625.json" }, { "category": "self", "summary": "WID-SEC-2023-2625 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2625" }, { "category": "external", "summary": "IBM Security Bulletin 7049133 vom 2023-10-10", "url": "https://www.ibm.com/support/pages/node/7049133" } ], "source_lang": "en-US", "title": "IBM QRadar SIEM: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-10-10T22:00:00.000+00:00", "generator": { "date": "2024-02-15T17:47:32.827+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-2625", "initial_release_date": "2023-10-10T22:00:00.000+00:00", "revision_history": [ { "date": "2023-10-10T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "IBM QRadar SIEM \u003c 7.5.0 UP7", "product": { "name": "IBM QRadar SIEM \u003c 7.5.0 UP7", "product_id": "T030425", "product_identification_helper": { "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up7" } } } ], "category": "vendor", "name": "IBM" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-40367", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-40367" }, { "cve": "CVE-2023-38408", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-38408" }, { "cve": "CVE-2023-35116", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-35116" }, { "cve": "CVE-2023-34981", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-34981" }, { "cve": "CVE-2023-34455", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-34455" }, { "cve": "CVE-2023-34454", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-34454" }, { "cve": "CVE-2023-34453", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-34453" }, { "cve": "CVE-2023-34396", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-34396" }, { "cve": "CVE-2023-34149", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-34149" }, { "cve": "CVE-2023-33201", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-33201" }, { "cve": "CVE-2023-32697", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-32697" }, { "cve": "CVE-2023-32067", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-32067" }, { "cve": "CVE-2023-30994", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-30994" }, { "cve": "CVE-2023-30441", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-30441" }, { "cve": "CVE-2023-2976", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-2976" }, { "cve": "CVE-2023-29007", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-29007" }, { "cve": "CVE-2023-28709", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-28709" }, { "cve": "CVE-2023-2828", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-2828" }, { "cve": "CVE-2023-26049", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-26049" }, { "cve": "CVE-2023-26048", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-26048" }, { "cve": "CVE-2023-2597", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-2597" }, { "cve": "CVE-2023-25652", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-25652" }, { "cve": "CVE-2023-24998", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-24998" }, { "cve": "CVE-2023-21968", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-21968" }, { "cve": "CVE-2023-21967", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-21967" }, { "cve": "CVE-2023-21954", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-21954" }, { "cve": "CVE-2023-21939", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-21939" }, { "cve": "CVE-2023-21938", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-21938" }, { "cve": "CVE-2023-21937", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-21937" }, { "cve": "CVE-2023-21930", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-21930" }, { "cve": "CVE-2023-21843", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-21843" }, { "cve": "CVE-2023-21830", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-21830" }, { "cve": "CVE-2023-20867", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2023-20867" }, { "cve": "CVE-2022-48339", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2022-48339" }, { "cve": "CVE-2022-40609", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2022-40609" }, { "cve": "CVE-2022-3564", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2022-3564" }, { "cve": "CVE-2022-25147", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2022-25147" }, { "cve": "CVE-2022-21426", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2022-21426" }, { "cve": "CVE-2020-13956", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2020-13956" }, { "cve": "CVE-2016-1000027", "notes": [ { "category": "description", "text": "In IBM QRadar SIEM existieren mehrere Schwachstellen. Die Fehler bestehen unter anderem aufgrund von Puffer\u00fcberl\u00e4ufen, Integer-\u00dcberl\u00e4ufen, unsicherer Behandlung, Use-after-free-Fehlern und einem unsicheren Deserialisierungsfehler. Zu den betroffenen Komponenten geh\u00f6ren Apache Tomcat, Apache Portable Runtime, Apache HttpClient, Java SE, l2cap_reassemble_sdu, c-ares, The Bouncy Castle Crypto Package, Pivota Spring Framework, snappy-java, IBM SDK, GNU Emacs, Fasterxml jackson-databind, VMWare Tools, Eclipse Jetty, OpenSSH, ISC BIND, Apache Struts, Git, SQLite JDBC, Eclipse Openj9 und Google Guava. Ein entfernter oder lokaler Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und einen Cross-Site-Scripting-Angriff durchzuf\u00fchren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion oder erh\u00f6hte Rechte." } ], "release_date": "2023-10-10T22:00:00Z", "title": "CVE-2016-1000027" } ] }
wid-sec-w-2023-1446
Vulnerability from csaf_certbund
Published
2023-06-13 22:00
Modified
2023-09-25 22:00
Summary
Microsoft Developer Tools: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Microsoft .NET Framework ist eine Komponente des Microsoft Windows-Betriebssystems, das die Erstellung und Ausführung von Softwareanwendungen und Webdiensten ermöglicht. Es beinhaltet sowohl eine Laufzeitumgebung als auch ein Framework von Klassenbibliotheken (APIs), u. a. für die Programmiersprache ASP (ASP.NET), den Datenzugriff (ADO.NET), intelligente Clientanwendungen (Windows Forms) und weitere.
Microsoft Azure DevOps Server ist eine Plattform für kollaborative Softwareprojekte.
NuGet ist ein Programm für die Verteilung von Software.
Microsoft Visual Studio ist eine integrierte Entwicklungsumgebung für Hochsprachen.
Visual Studio Code ist ein Quelltext-Editor von Microsoft.
Angriff
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft Azure DevOps Server, Microsoft NuGet, Microsoft Visual Studio und Microsoft Visual Studio Code ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Rechte zu erweitern und Daten zu manipulieren.
Betroffene Betriebssysteme
- Linux
- MacOS X
- Windows
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Microsoft .NET Framework ist eine Komponente des Microsoft Windows-Betriebssystems, das die Erstellung und Ausf\u00fchrung von Softwareanwendungen und Webdiensten erm\u00f6glicht. Es beinhaltet sowohl eine Laufzeitumgebung als auch ein Framework von Klassenbibliotheken (APIs), u. a. f\u00fcr die Programmiersprache ASP (ASP.NET), den Datenzugriff (ADO.NET), intelligente Clientanwendungen (Windows Forms) und weitere.\r\nMicrosoft Azure DevOps Server ist eine Plattform f\u00fcr kollaborative Softwareprojekte.\r\nNuGet ist ein Programm f\u00fcr die Verteilung von Software.\r\nMicrosoft Visual Studio ist eine integrierte Entwicklungsumgebung f\u00fcr Hochsprachen.\r\nVisual Studio Code ist ein Quelltext-Editor von Microsoft.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Microsoft .NET Framework, Microsoft Azure DevOps Server, Microsoft NuGet, Microsoft Visual Studio und Microsoft Visual Studio Code ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- MacOS X\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1446 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1446.json" }, { "category": "self", "summary": "WID-SEC-2023-1446 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1446" }, { "category": "external", "summary": "Hitachi Vulnerability Information HITACHI-SEC-2023-306 vom 2023-09-26", "url": "https://www.hitachi.com/products/it/storage-solutions/sec_info/2023/06.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4449 vom 2023-08-03", "url": "https://access.redhat.com/errata/RHSA-2023:4449" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4448 vom 2023-08-03", "url": "https://access.redhat.com/errata/RHSA-2023:4448" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6161-2 vom 2023-06-23", "url": "https://ubuntu.com/security/notices/USN-6161-2" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-3592 vom 2023-06-17", "url": "https://linux.oracle.com/errata/ELSA-2023-3592.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-3593 vom 2023-06-17", "url": "https://linux.oracle.com/errata/ELSA-2023-3593.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-3582 vom 2023-06-16", "url": "https://linux.oracle.com/errata/ELSA-2023-3582.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-3581 vom 2023-06-15", "url": "http://linux.oracle.com/errata/ELSA-2023-3581.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3593 vom 2023-06-14", "url": "https://access.redhat.com/errata/RHSA-2023:3593" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3581 vom 2023-06-14", "url": "https://access.redhat.com/errata/RHSA-2023:3581" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3580 vom 2023-06-14", "url": "https://access.redhat.com/errata/RHSA-2023:3580" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3582 vom 2023-06-14", "url": "https://access.redhat.com/errata/RHSA-2023:3582" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3592 vom 2023-06-14", "url": "https://access.redhat.com/errata/RHSA-2023:3592" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6161-1 vom 2023-06-13", "url": "https://ubuntu.com/security/notices/USN-6161-1" }, { "category": "external", "summary": "Microsoft Leitfaden f\u00fcr Sicherheitsupdates vom 2023-06-13", "url": "https://msrc.microsoft.com/update-guide" } ], "source_lang": "en-US", "title": "Microsoft Developer Tools: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-09-25T22:00:00.000+00:00", "generator": { "date": "2024-02-15T17:31:01.244+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-1446", "initial_release_date": "2023-06-13T22:00:00.000+00:00", "revision_history": [ { "date": "2023-06-13T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-06-14T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-06-15T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2023-06-18T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2023-06-25T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2023-08-02T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-09-25T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von HITACHI aufgenommen" } ], "status": "final", "version": "7" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Hitachi Storage Virtual Storage Platform", "product": { "name": "Hitachi Storage Virtual Storage Platform", "product_id": "T020487", "product_identification_helper": { "cpe": "cpe:/h:hitachi:storage:virtual_storage_platform" } } } ], "category": "vendor", "name": "Hitachi" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Microsoft .NET Framework 4.8.1", "product": { "name": "Microsoft .NET Framework 4.8.1", "product_id": "1273212", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:4.8.1" } } }, { "category": "product_name", "name": "Microsoft .NET Framework 3.5.1", "product": { "name": "Microsoft .NET Framework 3.5.1", "product_id": "130815", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:3.5.1" } } }, { "category": "product_name", "name": "Microsoft .NET Framework 4.6.2", "product": { "name": "Microsoft .NET Framework 4.6.2", "product_id": "336763", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:4.6.2" } } }, { "category": "product_name", "name": "Microsoft .NET Framework 4.7", "product": { "name": "Microsoft .NET Framework 4.7", "product_id": "432554", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:4.7" } } }, { "category": "product_name", "name": "Microsoft .NET Framework 4.7.1", "product": { "name": "Microsoft .NET Framework 4.7.1", "product_id": "432555", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:4.7.1" } } }, { "category": "product_name", "name": "Microsoft .NET Framework 4.7.2", "product": { "name": "Microsoft .NET Framework 4.7.2", "product_id": "432556", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:4.7.2" } } }, { "category": "product_name", "name": "Microsoft .NET Framework 4.8", "product": { "name": "Microsoft .NET Framework 4.8", "product_id": "432557", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:4.8" } } }, { "category": "product_name", "name": "Microsoft .NET Framework 3.5", "product": { "name": "Microsoft .NET Framework 3.5", "product_id": "834793", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:3.5:-" } } }, { "category": "product_name", "name": "Microsoft .NET Framework 2.0 SP2", "product": { "name": "Microsoft .NET Framework 2.0 SP2", "product_id": "T021515", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:2.0_sp2" } } }, { "category": "product_name", "name": "Microsoft .NET Framework 3.0 SP2", "product": { "name": "Microsoft .NET Framework 3.0 SP2", "product_id": "T024564", "product_identification_helper": { "cpe": "cpe:/a:microsoft:.net_framework:3.0_sp2" } } } ], "category": "product_name", "name": ".NET Framework" }, { "category": "product_name", "name": "Microsoft Azure DevOps Server 2020.1.2", "product": { "name": "Microsoft Azure DevOps Server 2020.1.2", "product_id": "1342801", "product_identification_helper": { "cpe": "cpe:/o:microsoft:azure_devops_server:2020.1.2:-" } } }, { "branches": [ { "category": "product_name", "name": "Microsoft NuGet 6.0.4", "product": { "name": "Microsoft NuGet 6.0.4", "product_id": "T028096", "product_identification_helper": { "cpe": "cpe:/a:microsoft:nuget:6.0.4" } } }, { "category": "product_name", "name": "Microsoft NuGet 6.2.3", "product": { "name": "Microsoft NuGet 6.2.3", "product_id": "T028097", "product_identification_helper": { "cpe": "cpe:/a:microsoft:nuget:6.2.3" } } }, { "category": "product_name", "name": "Microsoft NuGet 6.3.2", "product": { "name": "Microsoft NuGet 6.3.2", "product_id": "T028098", "product_identification_helper": { "cpe": "cpe:/a:microsoft:nuget:6.3.2" } } }, { "category": "product_name", "name": "Microsoft NuGet 6.4.1", "product": { "name": "Microsoft NuGet 6.4.1", "product_id": "T028099", "product_identification_helper": { "cpe": "cpe:/a:microsoft:nuget:6.4.1" } } }, { "category": "product_name", "name": "Microsoft NuGet 6.5.0", "product": { "name": "Microsoft NuGet 6.5.0", "product_id": "T028100", "product_identification_helper": { "cpe": "cpe:/a:microsoft:nuget:6.5.0" } } }, { "category": "product_name", "name": "Microsoft NuGet 6.6.0", "product": { "name": "Microsoft NuGet 6.6.0", "product_id": "T028101", "product_identification_helper": { "cpe": "cpe:/a:microsoft:nuget:6.6.0" } } } ], "category": "product_name", "name": "NuGet" }, { "category": "product_name", "name": "Microsoft Visual Studio 2013 Update 5", "product": { "name": "Microsoft Visual Studio 2013 Update 5", "product_id": "T014512", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_2013:update_5" } } }, { "category": "product_name", "name": "Microsoft Visual Studio 2015 Update 3", "product": { "name": "Microsoft Visual Studio 2015 Update 3", "product_id": "T014511", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_2015:update_3" } } }, { "category": "product_name", "name": "Microsoft Visual Studio 2017 version 15.9", "product": { "name": "Microsoft Visual Studio 2017 version 15.9", "product_id": "T015502", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_2017:version_15.9" } } }, { "category": "product_name", "name": "Microsoft Visual Studio 2019 version 16.11", "product": { "name": "Microsoft Visual Studio 2019 version 16.11", "product_id": "T024563", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_2019:version_16.11" } } }, { "branches": [ { "category": "product_name", "name": "Microsoft Visual Studio 2022 version 17.0", "product": { "name": "Microsoft Visual Studio 2022 version 17.0", "product_id": "T026754", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_2022:version_17.0" } } }, { "category": "product_name", "name": "Microsoft Visual Studio 2022 version 17.2", "product": { "name": "Microsoft Visual Studio 2022 version 17.2", "product_id": "T028102", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_2022:version_17.2" } } }, { "category": "product_name", "name": "Microsoft Visual Studio 2022 version 17.4", "product": { "name": "Microsoft Visual Studio 2022 version 17.4", "product_id": "T028103", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_2022:version_17.4" } } }, { "category": "product_name", "name": "Microsoft Visual Studio 2022 version 17.5", "product": { "name": "Microsoft Visual Studio 2022 version 17.5", "product_id": "T028104", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_2022:version_17.5" } } }, { "category": "product_name", "name": "Microsoft Visual Studio 2022 version 17.6", "product": { "name": "Microsoft Visual Studio 2022 version 17.6", "product_id": "T028105", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_2022:version_17.6" } } } ], "category": "product_name", "name": "Visual Studio 2022" }, { "category": "product_name", "name": "Microsoft Visual Studio Code", "product": { "name": "Microsoft Visual Studio Code", "product_id": "699261", "product_identification_helper": { "cpe": "cpe:/a:microsoft:visual_studio_code:-" } } } ], "category": "vendor", "name": "Microsoft" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-33144", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-33144" }, { "cve": "CVE-2023-33141", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-33141" }, { "cve": "CVE-2023-33139", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-33139" }, { "cve": "CVE-2023-33135", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-33135" }, { "cve": "CVE-2023-33128", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-33128" }, { "cve": "CVE-2023-33126", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-33126" }, { "cve": "CVE-2023-32032", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-32032" }, { "cve": "CVE-2023-32030", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-32030" }, { "cve": "CVE-2023-29353", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-29353" }, { "cve": "CVE-2023-29337", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-29337" }, { "cve": "CVE-2023-29331", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-29331" }, { "cve": "CVE-2023-29326", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-29326" }, { "cve": "CVE-2023-29012", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-29012" }, { "cve": "CVE-2023-29011", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-29011" }, { "cve": "CVE-2023-29007", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-29007" }, { "cve": "CVE-2023-27911", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-27911" }, { "cve": "CVE-2023-27910", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-27910" }, { "cve": "CVE-2023-27909", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-27909" }, { "cve": "CVE-2023-25815", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-25815" }, { "cve": "CVE-2023-25652", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-25652" }, { "cve": "CVE-2023-24936", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-24936" }, { "cve": "CVE-2023-24897", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-24897" }, { "cve": "CVE-2023-24895", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-24895" }, { "cve": "CVE-2023-21569", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-21569" }, { "cve": "CVE-2023-21565", "notes": [ { "category": "description", "text": "Es existieren mehrere Schwachstellen in verschiedenen Microsoft Developer Tools. Die Fehler bestehen u.a. durch mehrere Puffer\u00fcberl\u00e4ufe, unsachgem\u00e4\u00dfe Eingabe\u00fcberpr\u00fcfungen und unzureichende \u00dcberpr\u00fcfungen. Die meisten der Schwachstellen sind noch nicht im Detail beschrieben. Zu den betroffenen Komponenten geh\u00f6ren unter anderem AutoDesk und GitHub f\u00fcr Microsoft Visual Studio. Ein Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuf\u00fchren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuf\u00fchren, seine Rechte zu erweitern und Daten zu manipulieren. Die erfolgreiche Ausnutzung einiger dieser Schwachstellen erfordert eine Benutzerinteraktion." } ], "product_status": { "known_affected": [ "432555", "432556", "T028100", "432554", "67646", "432557", "T014511", "T015502", "T014512", "130815", "T004914", "T020487", "T021515", "1342801", "T024564", "T024563", "T028105", "T028103", "T028104", "T028101", "T028102", "T028099", "T028097", "T028098", "T028096", "834793", "336763", "699261", "1273212", "T000126", "T026754" ] }, "release_date": "2023-06-13T22:00:00Z", "title": "CVE-2023-21565" } ] }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.