ALT Linux Team

Package gem-git update in c10f2 on 2024-04-14

ALT-PU-2023-6306-9

Package gem-git updated to version 1.18.0-alt0.1 for branch c10f2 in task 330777.

Closed vulnerabilities

Published: 2022-01-05

BDU:2024-02286

Уязвимость библиотеки Ruby/Git интерпретатора Ruby, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (8.0) Vector: AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References:
Published: 2022-01-05

BDU:2024-02311

Уязвимость библиотеки Ruby/Gitt интерпретатора Ruby, позволяющая нарушителю выполнить произвольный код

Severity: HIGH (8.0) Vector: AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References:
Published: 2023-01-17
Modified: 2025-04-04

CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.

Severity: HIGH (8.0) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References:
Published: 2023-01-17
Modified: 2025-04-04

CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

Severity: HIGH (8.0) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top