MGASA-2025-0016

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2025-0016.html

Import Source

https://advisories.mageia.org/MGASA-2025-0016.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2025-0016

Related

CVE-2024-50349
CVE-2024-52006

Published

2025-01-20T18:21:44Z

Modified

2025-01-20T17:56:21Z

Summary

Updated git packages fix security vulnerabilities

Details

Git does not sanitize URLs when asking for credentials interactively. (CVE-2024-50349) Newline confusion in credential helpers can lead to credential exfiltration in git. (CVE-2024-52006)

References

https://advisories.mageia.org/MGASA-2025-0016.html
https://bugs.mageia.org/show_bug.cgi?id=33921
https://www.openwall.com/lists/oss-security/2025/01/14/4

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2025-0016

Affected packages