CVE-2023-4759
Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0
In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.
This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.
The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.
Setting git configuration option core.symlinks = false before checking out avoids the problem.
The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from 5.13.3.202401111512-r.
The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0
In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.
This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.
The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.
Setting git configuration option core.symlinks = false before checking out avoids the problem.
The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from 5.13.3.202401111512-r.
The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
- Record
CVE-2023-4759- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-59, CWE-178
- Updated
- 2026-11-02
EUVDEUVD-2023-2406
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0
In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.
This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.
The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.
Setting git configuration option core.symlinks = false before checking out avoids the problem.
The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from 5.13.3.202401111512-r.
The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
- Record
EUVD-2023-2406- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3p86-9955-h393
Arbitrary File Overwrite in Eclipse JGit
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0
In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.
This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.
The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.
Setting git configuration option core.symlinks = false before checking out avoids the problem.
The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from 5.13.3.202401111512-r.
The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
- Record
GHSA-3p86-9955-h393- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-178
- Updated
- 2026-11-02
NVD
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0
In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.
This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.
The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.
Setting git configuration option core.symlinks = false before checking out avoids the problem.
The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from 5.13.3.202401111512-r.
The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
- Record
CVE-2023-4759- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-59, CWE-178
- Updated
- 2026-11-02
OSV
Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0
In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.
This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.
The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.
Setting git configuration option core.symlinks = false before checking out avoids the problem.
The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from 5.13.3.202401111512-r.
The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
- Record
CVE-2023-4759- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-178, CWE-59
- Updated
- 2026-11-04
OSVDEBIAN-CVE-2023-4759
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem. This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command. The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration. Setting git configuration option core.symlinks = false before checking out avoids the problem. The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from 5.13.3.202401111512-r. The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
- Record
DEBIAN-CVE-2023-4759- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 14 moreShow less
OSVGHSA-3p86-9955-h393
Arbitrary File Overwrite in Eclipse JGit
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0
In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.
This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.
The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.
Setting git configuration option core.symlinks = false before checking out avoids the problem.
The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from 5.13.3.202401111512-r.
The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
- Record
GHSA-3p86-9955-h393- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-178
- Updated
- 2026-11-02
OSVOESA-2023-1995
jgit security update
A pure Java implementation of the Git version control system and command line interface.
Security Fix(es):
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0
In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem.
This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command.
The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration.
Setting git configuration option core.symlinks = false before checking out avoids the problem.
The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ .
The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
(CVE-2023-4759)
- Record
OESA-2023-1995- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2024:0710
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 Security update
- Record
RHSA-2024:0710- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2024:0711
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 Security update
- Record
RHSA-2024:0711- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2024:0712
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.15 security update
- Record
RHSA-2024:0712- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2024:1192
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update
- Record
RHSA-2024:1192- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:1193
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update
- Record
RHSA-2024:1193- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-4759
Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem, or when a checkout from a clone of such a repository is performed on a case-insensitive filesystem. This can happen on checkout (DirCacheCheckout), merge (ResolveMerger via its WorkingTreeUpdater), pull (PullCommand using merge), and when applying a patch (PatchApplier). This can be exploited for remote code execution (RCE), for instance if the file written outside the working tree is a git filter that gets executed on a subsequent git command. The issue occurs only on case-insensitive filesystems, like the default filesystems on Windows and macOS. The user performing the clone or checkout must have the rights to create symbolic links for the problem to occur, and symbolic links must be enabled in the git configuration. Setting git configuration option core.symlinks = false before checking out avoids the problem. The issue was fixed in Eclipse JGit version 6.6.1.202309021850-r and 6.7.0.202309050840-r, available via Maven Central https://repo1.maven.org/maven2/org/eclipse/jgit/ and repo.eclipse.org https://repo.eclipse.org/content/repositories/jgit-releases/ . A backport is available in 5.13.3 starting from 5.13.3.202401111512-r. The JGit maintainers would like to thank RyotaK for finding and reporting this issue.
- Record
UBUNTU-CVE-2023-4759- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1771373384 No score
TuxCare security update for org.eclipse.jgit:org.eclipse.jgit (1 CVE)
TuxCare rebuilt org.eclipse.jgit:org.eclipse.jgit to address 1 CVE. Fixed in 5.7.0.202003110725-r-tuxcare.2.
- Record
CLSA-2026-1771373384- Updated
- 2026-11-02
OSVCLSA-2026-1793889377 No score
TuxCare security update for org.eclipse.jgit:org.eclipse.jgit (2 CVEs)
TuxCare rebuilt org.eclipse.jgit:org.eclipse.jgit to address 2 CVEs. Fixed in 6.2.0.202206071550-r-tuxcare.1.
- Record
CLSA-2026-1793889377- Updated
- 2026-11-06
OSVopenSUSE-SU-2024:13312-1 No score
eclipse-jgit-5.11.0-9.1 on GA media
These are all security issues fixed in the eclipse-jgit-5.11.0-9.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13312-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15232-1 No score
jgit-5.11.0-2.1 on GA media
These are all security issues fixed in the jgit-5.11.0-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15232-1- Updated
- 2026-11-02
OSVROOT-APP-MAVEN-CVE-2023-4759 No score
CVE-2023-4759 in org.eclipse.jgit:org.eclipse.jgit - Patched by Root
Root has patched CVE-2023-4759 in the org.eclipse.jgit:org.eclipse.jgit package for Root:Maven. Multiple fixed versions available.
- Record
ROOT-APP-MAVEN-CVE-2023-4759- Updated
- 2026-11-02
OSVSUSE-SU-2024:0057-1 No score
Security update for eclipse-jgit, jsch
This update for eclipse-jgit, jsch fixes the following issues:
Security fix:
- CVE-2023-4759: Fixed an arbitrary file overwrite which might have occurred with a specially crafted git repository and a case-insensitive filesystem. (bsc#1215298)
Other fixes: jsch was updated to version 0.2.9:
- Added support for various algorithms
- Migrated from
com.jcraft:jschtocom.github.mwiede:jschfork (bsc#1211955):- Alias to the old artifact since the new one is drop-in replacement
- Keep the old OSGi bundle symbolic name to avoid extensive patching of eclipse stack
- Updated to version 0.2.9:
- For the full list of changes please consult the upstream changelogs below for each version updated:
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.9
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.8
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.7
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.6
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.5
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.4
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.3
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.2
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.1
- https://github.com/mwiede/jsch/releases/tag/jsch-0.2.0
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.71
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.70
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.69
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.68
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.67
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.66
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.65
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.64
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.63
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.62
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.61
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.60
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.59
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.58
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.57
- https://github.com/mwiede/jsch/releases/tag/jsch-0.1.56
- For the full list of changes please consult the upstream changelogs below for each version updated:
eclipse-jgit:
- Craft the jgit script from the real Main class of the jar file instead of using a jar launcher (bsc#1209646)
- Record
SUSE-SU-2024:0057-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.eclipse.jgit:org.eclipse.jgitMaven |
6.0.0.202111291000-r to 6.6.0.202305301015-r | 6.6.1.202309021850-r |
org.eclipse.jgit:org.eclipse.jgitMaven |
before 5.13.3.202401111512-r | 5.13.3.202401111512-r |
org.eclipse.jgit:org.eclipse.jgitTuxCare:Maven |
5.7.0.202003110725-r up to 5.7.0.202003110725-r-tuxcare.2, plus listed versions 5.7.0.202003110725-r-tuxcare.1 |
5.7.0.202003110725-r-tuxcare.2 |
org.eclipse.jgit:org.eclipse.jgitTuxCare:Maven From an advisory covering 2 CVEs |
6.2.0.202206071550-r up to 6.2.0.202206071550-r-tuxcare.1 | 6.2.0.202206071550-r-tuxcare.1 |
jgitDebian:12 |
All versions, plus listed versions 4.11.9-26.7.0-16.7.0-2 |
None known |
jgitDebian:13 |
before 6.7.0-1 | 6.7.0-1 |
jgitDebian:14 |
before 6.7.0-1 | 6.7.0-1 |
org.eclipse.jgit:org.eclipse.jgitMaven |
6.0.0.202111291000-r up to 6.6.1.202309021850-r, plus listed versions 6.1.0.202203080745-r6.2.0.202206071550-r6.3.0.202209071007-r6.4.0.202211300538-r6.5.0.202303070854-r6.6.0.202305301015-r |
6.6.1.202309021850-r |
org.eclipse.jgit:org.eclipse.jgitMaven |
before 5.13.3.202401111512-r, plus listed versions 1.2.0.201112221803-r1.3.0.201202151440-r2.0.0.201206130900-r2.1.0.201209190230-r2.2.0.201212191850-r Show 45 moreShow less2.3.1.201302201838-r3.0.0.201306101825-r3.1.0.201310021548-r3.2.0.201312181205-r3.3.0.201403021825-r3.3.1.201403241930-r3.3.2.201404171909-r3.4.0.201405051725-m73.4.0.201405211411-rc13.4.0.201405281120-rc23.4.0.201406041058-rc33.4.0.201406110918-r3.4.1.201406201815-r3.4.2.201412180340-r3.5.0.201409071800-rc13.5.0.201409260305-r3.5.1.201410131835-r3.5.2.201411120430-r3.5.3.201412180710-r3.6.0.201411121045-m13.6.0.201412230720-r3.6.1.201501031845-r3.6.2.201501210735-r3.7.0.201502260915-r3.7.1.201504261725-r4.0.0.201505050340-m24.0.0.201505260635-rc24.0.0.201506020755-rc34.0.0.201506090130-r4.0.1.201506240215-r4.0.2.201509141540-r4.0.3.201509231615-r4.1.0.201509280440-r4.1.1.201511131810-r4.1.2.201602141800-r4.10.0.201712302008-r4.11.0.201803080745-r4.11.1.201807311124-r4.11.2.201809100523-r4.11.3.201809181037-r4.11.4.201810060650-r4.11.5.201810191925-r4.11.6.201812241910-r4.11.7.201903122105-r4.11.8.201904181247-r |
5.13.3.202401111512-r |
jgitopenEuler:20.03-LTS-SP1 |
before 5.11.0-3.oe1 | 5.11.0-3.oe1 |
Show 226 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jgitopenEuler:20.03-LTS-SP3 |
before 5.11.0-3.oe1 | 5.11.0-3.oe1 |
jgitopenEuler:20.03-LTS-SP4 |
before 5.11.0-3.oe2003sp4 | 5.11.0-3.oe2003sp4 |
jgitopenEuler:22.03-LTS |
before 5.11.0-3.oe2203sp2 | 5.11.0-3.oe2203sp2 |
jgitopenEuler:22.03-LTS-SP1 |
before 5.11.0-3.oe2203sp1 | 5.11.0-3.oe2203sp1 |
jgitopenEuler:22.03-LTS-SP2 |
before 5.11.0-3.oe2203sp2 | 5.11.0-3.oe2203sp2 |
eap7-eclipse-jgitRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:5.13.2-1.SP1_redhat_00001.1.el7eap | 0:5.13.2-1.SP1_redhat_00001.1.el7eap |
eap7-insights-java-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.1.1-1.redhat_00001.1.el7eap | 0:1.1.1-1.redhat_00001.1.el7eap |
eap7-glassfish-jsfRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:2.3.14-7.SP08_redhat_00001.1.el7eap | 0:2.3.14-7.SP08_redhat_00001.1.el7eap |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el7eap | 0:5.3.33-2.Final_redhat_00001.1.el7eap |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el7eap | 0:5.3.33-2.Final_redhat_00001.1.el7eap |
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el7eap | 0:5.3.33-2.Final_redhat_00001.1.el7eap |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el7eap | 0:5.3.33-2.Final_redhat_00001.1.el7eap |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el7eap | 0:5.3.33-2.Final_redhat_00001.1.el7eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el7eap | 0:1.5.16-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el7eap | 0:1.5.16-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el7eap | 0:1.5.16-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el7eap | 0:1.5.16-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el7eap | 0:1.5.16-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el7eap | 0:1.5.16-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el7eap | 0:1.5.16-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el7eap | 0:1.5.16-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el7eap | 0:1.5.16-1.Final_redhat_00001.1.el7eap |
eap7-jboss-cert-helperRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.1.1-1.redhat_00001.1.el7eap | 0:1.1.1-1.redhat_00001.1.el7eap |
eap7-jboss-cert-helper-debuginfoRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.1.1-1.redhat_00001.1.el7eap | 0:1.1.1-1.redhat_00001.1.el7eap |
eap7-jboss-mscRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.4.13-1.Final_redhat_00001.1.el7eap | 0:1.4.13-1.Final_redhat_00001.1.el7eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.10.0-34.Final_redhat_00033.1.el7eap | 0:1.10.0-34.Final_redhat_00033.1.el7eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.10.0-34.Final_redhat_00033.1.el7eap | 0:1.10.0-34.Final_redhat_00033.1.el7eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.10.0-34.Final_redhat_00033.1.el7eap | 0:1.10.0-34.Final_redhat_00033.1.el7eap |
eap7-jbossws-spiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.4.0-4.Final_redhat_00002.1.el7eap | 0:3.4.0-4.Final_redhat_00002.1.el7eap |
eap7-log4j2-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.1.2-1.Final_redhat_00002.1.el7eap | 0:1.1.2-1.Final_redhat_00002.1.el7eap |
eap7-protostreamRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:4.3.6-1.Final_redhat_00001.1.el7eap | 0:4.3.6-1.Final_redhat_00001.1.el7eap |
eap7-resteasyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-atom-providerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-cdiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-cryptoRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-jackson-providerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-jackson2-providerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-jaxb-providerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-jaxrsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-jettison-providerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-jose-jwtRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-jsapiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-json-binding-providerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-json-p-providerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-multipart-providerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-rxjava2Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-springRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-validator-provider-11Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-resteasy-yaml-providerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el7eap | 0:3.15.9-1.Final_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el7eap | 0:7.4.15-2.GA_redhat_00002.1.el7eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.15.21-1.Final_redhat_00001.1.el7eap | 0:1.15.21-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.15.21-1.Final_redhat_00001.1.el7eap | 0:1.15.21-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el7eap | 0:7.4.15-2.GA_redhat_00002.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el7eap | 0:7.4.15-2.GA_redhat_00002.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el7eap | 0:7.4.15-2.GA_redhat_00002.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el7eap | 0:7.4.15-2.GA_redhat_00002.1.el7eap |
eap7-wildfly-naming-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.0.17-1.Final_redhat_00001.1.el7eap | 0:1.0.17-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:1.1.17-1.Final_redhat_00001.1.el7eap | 0:1.1.17-1.Final_redhat_00001.1.el7eap |
eap7-xml-securityRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 2 CVEs |
before 0:2.2.6-1.redhat_00002.1.el7eap | 0:2.2.6-1.redhat_00002.1.el7eap |
eap7-eclipse-jgitRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:5.13.2-1.SP1_redhat_00001.1.el8eap | 0:5.13.2-1.SP1_redhat_00001.1.el8eap |
eap7-glassfish-jsfRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:2.3.14-7.SP08_redhat_00001.1.el8eap | 0:2.3.14-7.SP08_redhat_00001.1.el8eap |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el8eap | 0:5.3.33-2.Final_redhat_00001.1.el8eap |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el8eap | 0:5.3.33-2.Final_redhat_00001.1.el8eap |
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el8eap | 0:5.3.33-2.Final_redhat_00001.1.el8eap |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el8eap | 0:5.3.33-2.Final_redhat_00001.1.el8eap |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el8eap | 0:5.3.33-2.Final_redhat_00001.1.el8eap |
eap7-insights-java-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.1.1-1.redhat_00001.1.el8eap | 0:1.1.1-1.redhat_00001.1.el8eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el8eap | 0:1.5.16-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el8eap | 0:1.5.16-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el8eap | 0:1.5.16-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el8eap | 0:1.5.16-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el8eap | 0:1.5.16-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el8eap | 0:1.5.16-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el8eap | 0:1.5.16-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el8eap | 0:1.5.16-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el8eap | 0:1.5.16-1.Final_redhat_00001.1.el8eap |
eap7-jboss-cert-helperRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.1.1-1.redhat_00001.1.el8eap | 0:1.1.1-1.redhat_00001.1.el8eap |
eap7-jboss-mscRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.4.13-1.Final_redhat_00001.1.el8eap | 0:1.4.13-1.Final_redhat_00001.1.el8eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.10.0-34.Final_redhat_00033.1.el8eap | 0:1.10.0-34.Final_redhat_00033.1.el8eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.10.0-34.Final_redhat_00033.1.el8eap | 0:1.10.0-34.Final_redhat_00033.1.el8eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.10.0-34.Final_redhat_00033.1.el8eap | 0:1.10.0-34.Final_redhat_00033.1.el8eap |
eap7-jbossws-spiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.4.0-4.Final_redhat_00002.1.el8eap | 0:3.4.0-4.Final_redhat_00002.1.el8eap |
eap7-log4j2-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.1.2-1.Final_redhat_00002.1.el8eap | 0:1.1.2-1.Final_redhat_00002.1.el8eap |
eap7-protostreamRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:4.3.6-1.Final_redhat_00001.1.el8eap | 0:4.3.6-1.Final_redhat_00001.1.el8eap |
eap7-resteasyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-atom-providerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-cdiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-cryptoRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-jackson-providerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-jackson2-providerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-jaxb-providerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-jaxrsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-jettison-providerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-jose-jwtRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-jsapiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-json-binding-providerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-json-p-providerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-multipart-providerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-rxjava2Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-springRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-validator-provider-11Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-resteasy-yaml-providerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el8eap | 0:3.15.9-1.Final_redhat_00001.1.el8eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el8eap | 0:7.4.15-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.15.21-1.Final_redhat_00001.1.el8eap | 0:1.15.21-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.15.21-1.Final_redhat_00001.1.el8eap | 0:1.15.21-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el8eap | 0:7.4.15-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el8eap | 0:7.4.15-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el8eap | 0:7.4.15-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el8eap | 0:7.4.15-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el8eap | 0:7.4.15-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-naming-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.0.17-1.Final_redhat_00001.1.el8eap | 0:1.0.17-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:1.1.17-1.Final_redhat_00001.1.el8eap | 0:1.1.17-1.Final_redhat_00001.1.el8eap |
eap7-xml-securityRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 2 CVEs |
before 0:2.2.6-1.redhat_00002.1.el8eap | 0:2.2.6-1.redhat_00002.1.el8eap |
eap7-eclipse-jgitRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:5.13.2-1.SP1_redhat_00001.1.el9eap | 0:5.13.2-1.SP1_redhat_00001.1.el9eap |
eap7-insights-java-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.1.1-1.redhat_00001.1.el9eap | 0:1.1.1-1.redhat_00001.1.el9eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.15.21-1.Final_redhat_00001.1.el9eap | 0:1.15.21-1.Final_redhat_00001.1.el9eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.15.21-1.Final_redhat_00001.1.el9eap | 0:1.15.21-1.Final_redhat_00001.1.el9eap |
eap7-glassfish-jsfRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:2.3.14-7.SP08_redhat_00001.1.el9eap | 0:2.3.14-7.SP08_redhat_00001.1.el9eap |
eap7-hibernateRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el9eap | 0:5.3.33-2.Final_redhat_00001.1.el9eap |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el9eap | 0:5.3.33-2.Final_redhat_00001.1.el9eap |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:5.3.33-2.Final_redhat_00001.1.el9eap | 0:5.3.33-2.Final_redhat_00001.1.el9eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el9eap | 0:1.5.16-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el9eap | 0:1.5.16-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el9eap | 0:1.5.16-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el9eap | 0:1.5.16-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el9eap | 0:1.5.16-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el9eap | 0:1.5.16-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el9eap | 0:1.5.16-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el9eap | 0:1.5.16-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.5.16-1.Final_redhat_00001.1.el9eap | 0:1.5.16-1.Final_redhat_00001.1.el9eap |
eap7-jboss-cert-helperRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.1.1-1.redhat_00001.1.el9eap | 0:1.1.1-1.redhat_00001.1.el9eap |
eap7-jboss-mscRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.4.13-1.Final_redhat_00001.1.el9eap | 0:1.4.13-1.Final_redhat_00001.1.el9eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.10.0-34.Final_redhat_00033.1.el9eap | 0:1.10.0-34.Final_redhat_00033.1.el9eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.10.0-34.Final_redhat_00033.1.el9eap | 0:1.10.0-34.Final_redhat_00033.1.el9eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.10.0-34.Final_redhat_00033.1.el9eap | 0:1.10.0-34.Final_redhat_00033.1.el9eap |
eap7-jbossws-spiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.4.0-4.Final_redhat_00002.1.el9eap | 0:3.4.0-4.Final_redhat_00002.1.el9eap |
eap7-log4j2-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.1.2-1.Final_redhat_00002.1.el9eap | 0:1.1.2-1.Final_redhat_00002.1.el9eap |
eap7-protostreamRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:4.3.6-1.Final_redhat_00001.1.el9eap | 0:4.3.6-1.Final_redhat_00001.1.el9eap |
eap7-resteasyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-atom-providerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-cdiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-cryptoRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-jackson-providerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-jackson2-providerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-jaxb-providerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-jaxrsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-jettison-providerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-jose-jwtRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-jsapiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-json-binding-providerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-json-p-providerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-multipart-providerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-rxjava2Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-springRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-validator-provider-11Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-resteasy-yaml-providerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:3.15.9-1.Final_redhat_00001.1.el9eap | 0:3.15.9-1.Final_redhat_00001.1.el9eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el9eap | 0:7.4.15-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el9eap | 0:7.4.15-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el9eap | 0:7.4.15-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el9eap | 0:7.4.15-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el9eap | 0:7.4.15-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:7.4.15-2.GA_redhat_00002.1.el9eap | 0:7.4.15-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-naming-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.0.17-1.Final_redhat_00001.1.el9eap | 0:1.0.17-1.Final_redhat_00001.1.el9eap |
eap7-wildfly-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:1.1.17-1.Final_redhat_00001.1.el9eap | 0:1.1.17-1.Final_redhat_00001.1.el9eap |
eap7-xml-securityRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 2 CVEs |
before 0:2.2.6-1.redhat_00002.1.el9eap | 0:2.2.6-1.redhat_00002.1.el9eap |
eap8-apache-sshdRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:2.12.0-1.redhat_00001.1.el8eap | 0:2.12.0-1.redhat_00001.1.el8eap |
eap8-eclipse-jgitRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:6.6.1.202309021850-1.r_redhat_00001.1.el8eap | 0:6.6.1.202309021850-1.r_redhat_00001.1.el8eap |
eap8-log4jRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:2.19.0-2.redhat_00001.1.el8eap | 0:2.19.0-2.redhat_00001.1.el8eap |
eap8-lucene-analyzers-commonRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el8eap | 0:8.11.2-2.redhat_00001.1.el8eap |
eap8-lucene-coreRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el8eap | 0:8.11.2-2.redhat_00001.1.el8eap |
eap8-lucene-facetRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el8eap | 0:8.11.2-2.redhat_00001.1.el8eap |
eap8-lucene-joinRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el8eap | 0:8.11.2-2.redhat_00001.1.el8eap |
eap8-lucene-queriesRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el8eap | 0:8.11.2-2.redhat_00001.1.el8eap |
eap8-lucene-queryparserRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el8eap | 0:8.11.2-2.redhat_00001.1.el8eap |
eap8-lucene-solrRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el8eap | 0:8.11.2-2.redhat_00001.1.el8eap |
eap8-parssonRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:1.1.5-1.redhat_00001.1.el8eap | 0:1.1.5-1.redhat_00001.1.el8eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.0.1-3.GA_redhat_00002.1.el8eap | 0:8.0.1-3.GA_redhat_00002.1.el8eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.0.1-3.GA_redhat_00002.1.el8eap | 0:8.0.1-3.GA_redhat_00002.1.el8eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.0.1-3.GA_redhat_00002.1.el8eap | 0:8.0.1-3.GA_redhat_00002.1.el8eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 4 CVEs |
before 0:8.0.1-3.GA_redhat_00002.1.el8eap | 0:8.0.1-3.GA_redhat_00002.1.el8eap |
eap8-apache-sshdRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:2.12.0-1.redhat_00001.1.el9eap | 0:2.12.0-1.redhat_00001.1.el9eap |
eap8-eclipse-jgitRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:6.6.1.202309021850-1.r_redhat_00001.1.el9eap | 0:6.6.1.202309021850-1.r_redhat_00001.1.el9eap |
eap8-log4jRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:2.19.0-2.redhat_00001.1.el9eap | 0:2.19.0-2.redhat_00001.1.el9eap |
eap8-lucene-analyzers-commonRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el9eap | 0:8.11.2-2.redhat_00001.1.el9eap |
eap8-lucene-coreRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el9eap | 0:8.11.2-2.redhat_00001.1.el9eap |
eap8-lucene-facetRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el9eap | 0:8.11.2-2.redhat_00001.1.el9eap |
eap8-lucene-joinRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el9eap | 0:8.11.2-2.redhat_00001.1.el9eap |
eap8-lucene-queriesRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el9eap | 0:8.11.2-2.redhat_00001.1.el9eap |
eap8-lucene-queryparserRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el9eap | 0:8.11.2-2.redhat_00001.1.el9eap |
eap8-lucene-solrRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.11.2-2.redhat_00001.1.el9eap | 0:8.11.2-2.redhat_00001.1.el9eap |
eap8-parssonRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:1.1.5-1.redhat_00001.1.el9eap | 0:1.1.5-1.redhat_00001.1.el9eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.0.1-3.GA_redhat_00002.1.el9eap | 0:8.0.1-3.GA_redhat_00002.1.el9eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.0.1-3.GA_redhat_00002.1.el9eap | 0:8.0.1-3.GA_redhat_00002.1.el9eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.0.1-3.GA_redhat_00002.1.el9eap | 0:8.0.1-3.GA_redhat_00002.1.el9eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 4 CVEs |
before 0:8.0.1-3.GA_redhat_00002.1.el9eap | 0:8.0.1-3.GA_redhat_00002.1.el9eap |
org.eclipse.jgit:org.eclipse.jgitRoot:Maven |
before 5.7.0.202003110725-r-aikido.1 | 5.7.0.202003110725-r-aikido.15.7.0.202003110725-r-aikido.25.11.0.202103091610-r-aikido.1 |
io.root.org.eclipse.jgit:org.eclipse.jgitRoot:Maven |
before 5.7.0.202003110725-r-root.io.1 | 5.7.0.202003110725-r-root.io.15.7.0.202003110725-r-root.io.25.11.0.202103091610-r-root.io.1 |
jschSUSE:Linux Enterprise Module for Development Tools 15 SP4 |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Linux Enterprise Module for Development Tools 15 SP5 |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Manager Server Module 4.3 |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jschSUSE:Enterprise Storage 7.1 |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
eclipse-jgitopenSUSE:Leap 15.4 |
before 5.11.0-150200.3.15.2 | 5.11.0-150200.3.15.2 |
jgitopenSUSE:Leap 15.4 |
before 5.11.0-150200.3.15.2 | 5.11.0-150200.3.15.2 |
jschopenSUSE:Leap 15.4 |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
eclipse-jgitopenSUSE:Leap 15.5 |
before 5.11.0-150200.3.15.2 | 5.11.0-150200.3.15.2 |
jschopenSUSE:Leap 15.5 |
before 0.2.9-150200.11.10.1 | 0.2.9-150200.11.10.1 |
jgitUbuntu:16.04:LTS |
All versions, plus listed versions 3.7.1-13.7.1-2 |
None known |
jgitUbuntu:18.04:LTS |
All versions, plus listed versions 3.7.1-4 |
None known |
jgitUbuntu:20.04:LTS |
All versions, plus listed versions 3.7.1-6 |
None known |
jgitUbuntu:22.04:LTS |
All versions, plus listed versions 4.11.9-1 |
None known |
jgitUbuntu:24.04:LTS |
All versions, plus listed versions 4.11.9-2 |
None known |
jgitUbuntu:25.10 |
All versions, plus listed versions 6.7.0-2 |
None known |
jgitUbuntu:26.10 |
All versions, plus listed versions 6.7.0-2build1 |
None known |
jgitUbuntu:26.04:LTS |
All versions, plus listed versions 6.7.0-26.7.0-2build1 |
None known |
eclipse-jgitopenSUSE:Tumbleweed |
before 5.11.0-9.1 | 5.11.0-9.1 |
jgitopenSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 5.11.0-2.1 | 5.11.0-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases | OSV | |
| affected | ||
| facts | OSV | |
| aliases, products, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-4759 is a high vulnerability (CVSS 8.8) in Eclipse Jgit, published September 12, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.19%, the 82nd percentile. Fixed in org.eclipse.jgit:org.eclipse.jgit 6.6.1.202309021850-r.
References
gitlab.eclipse.org/security/vulnerability-reports/-/issues/11
projects.eclipse.org/projects/technology.jgit/releases/6.6.1
git.eclipse.org/c/jgit/jgit.git/commit?id=9072103f3b3cf64dd12ad2949836ab98f62dabf1
nvd.nist.gov/vuln/detail/CVE-2023-4759
github.com/eclipse-jgit/jgit/issues/30
Show 66 moreShow less
security-tracker.debian.org/tracker/CVE-2023-4759
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1995
access.redhat.com/errata/RHSA-2024:0710
bugzilla.redhat.com/show_bug.cgi?id=2238614
issues.redhat.com/browse/JBEAP-25375
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0710.json
cve.org/CVERecord?id=CVE-2023-4759
openwall.com/lists/oss-security/2023/10/20/5
lists.apache.org/thread/vmqbp9mfxtrf0kmbnnmbn3h9j6dr9q55
terrapin-attack.com
suse.com/support/update/announcement/2024/suse-su-20240057-1
bugzilla.suse.com/1209646
ubuntu.com/security/CVE-2023-4759
Left out here: 94 versions. The JSON record has them.