{"id":"CVE-2015-7545","aliases":["DEBIAN-CVE-2015-7545","DSA-3435-1","EUVD-2015-7460","GHSA-3rvg-chjx-7h2j","RHSA-2015:2515","RHSA-2015:2561","SUSE-SU-2015:2025-1","SUSE-SU-2015:2325-1","UBUNTU-CVE-2015-7545","USN-2835-1","openSUSE-SU-2024:10070-1"],"status":"published","title":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4...","description":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.18672,"percentile":0.97284,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-20","CWE-284"],"published":"2015-12-09T00:00:00Z","modified":"2026-09-09T07:01:38Z","exploits":[{"source":"pocgithub","id":"avuserow/bug-free-chainsaw","title":"avuserow/bug-free-chainsaw","date":"2015-12-16","url":"https://github.com/avuserow/bug-free-chainsaw"}],"fixes":[{"ecosystem":"Debian:12","package":"git","fixed_in":["1:2.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"git","fixed_in":["1:2.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"git","fixed_in":["1:2.6.1-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"git","fixed_in":["1:1.7.10.4-1+wheezy2"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"git","fixed_in":["1:2.1.4-2.1+deb8u1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-emacs-git","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-emacs-git-el","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-all","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-cvs","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-daemon","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-debuginfo","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-email","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-gui","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-svn","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-gitk","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-gitweb","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-perl-Git","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-perl-Git-SVN","fixed_in":["0:1.9.4-3.el6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-emacs-git","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-emacs-git-el","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-all","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-bzr","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-cvs","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-daemon","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-debuginfo","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-email","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-gui","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-hg","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-svn","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-gitk","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-gitweb","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-perl-Git","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-perl-Git-SVN","fixed_in":["0:1.9.4-3.el7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-git-el","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-all","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-bzr","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-cvs","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-daemon","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-debuginfo","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-email","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-gui","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-hg","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-p4","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-svn","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gitk","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"gitweb","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"perl-Git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"perl-Git-SVN","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-git-el","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-all","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-bzr","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-cvs","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-daemon","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-debuginfo","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-email","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-gui","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-hg","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-p4","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-svn","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gitk","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gitweb","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perl-Git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perl-Git-SVN","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-debuginfo","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"perl-Git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-git-el","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-all","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-bzr","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-cvs","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-daemon","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-email","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-gui","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-hg","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-p4","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-svn","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gitk","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"gitweb","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"perl-Git-SVN","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-debuginfo","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perl-Git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-git","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-git-el","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-all","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-bzr","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-cvs","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-daemon","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-email","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-gui","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-hg","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-p4","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-svn","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gitk","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gitweb","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perl-Git-SVN","fixed_in":["0:1.8.3.1-6.el7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"git","fixed_in":["1.8.5.6-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"git","fixed_in":["1.8.5.6-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"git","fixed_in":["1.8.5.6-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"git","fixed_in":["1.8.5.6-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"git","fixed_in":["1.8.5.6-15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"git","fixed_in":["1.8.5.6-15.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"git","fixed_in":["1:1.9.1-1ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6.1-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.10.4-1+wheezy2"}]}],"versions":["1:1.7.10.4-1+wheezy1"]},{"source":"osv","ecosystem":"Debian:8","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.4-2.1+deb8u1"}]}],"versions":["1:2.1.4-2.1"]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el6","package":"git19-perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:2::el7","package":"git19-perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.4-3.el7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-p4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-p4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-p4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perl-Git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"emacs-git-el","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-bzr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-cvs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-email","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-hg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-p4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"git-svn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gitk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"gitweb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"perl-Git-SVN","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.3.1-6.el7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5.6-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5.6-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5.6-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5.6-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5.6-15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.5.6-15.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.9.1-1ubuntu0.2"}]}],"versions":["1:1.8.3.2-1","1:1.8.4.2-1","1:1.8.4.3-1","1:1.8.4.4-1","1:1.8.5-1","1:1.8.5.1-1","1:1.8.5.2-1","1:1.8.5.2-2","1:1.8.5.3-1","1:1.9~rc1-1","1:1.9.0-1","1:1.9.1-1","1:1.9.1-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"git","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.9.1-1ubuntu0.2"}]}],"versions":["1:1.8.3.2-1","1:1.8.4.2-1","1:1.8.4.3-1","1:1.8.4.4-1","1:1.8.5-1","1:1.8.5.1-1","1:1.8.5.2-1","1:1.8.5.2-2","1:1.8.5.3-1","1:1.9~rc1-1","1:1.9.0-1","1:1.9.1-1","1:1.9.1-1ubuntu0.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mercurial","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0-1.1"}]}],"bundled":5}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"git_project","product":"git"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"redhat","product":"software_collections"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-2515.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-11/msg00066.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201605-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/08/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","web","report"]},{"url":"https://lkml.org/lkml/2015/10/5/683","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://github.com/git/git/blob/master/Documentation/RelNotes/2.6.1.txt","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1034501","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1269794","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://github.com/git/git/blob/master/Documentation/RelNotes/2.3.10.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.ubuntu.com/usn/USN-2835-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"https://kernel.googlesource.com/pub/scm/git/git/+/33cfccbbf35a56e190b79bdec5c85457c952a021","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://github.com/git/git/blob/master/Documentation/RelNotes/2.5.4.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/11/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/78711","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/09/8","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://github.com/git/git/blob/master/Documentation/RelNotes/2.4.10.txt","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.533255","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","web"]},{"url":"http://www.debian.org/security/2016/dsa-3435","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7545","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-3rvg-chjx-7h2j"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-7545","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2515","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2515.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-7545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7545","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2561","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2561.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152025-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/948969","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7545","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152325-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-7545","tags":["report"]},{"url":"http://seclists.org/oss-sec/2015/q4/67","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/10/06/1","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/12/09/7","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2835-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3630","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-7545","description":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.","status":"published","published":"2016-04-13T15:00:00Z","modified":"2024-08-06T07:51:28.413Z","updated_at":"2026-11-02T14:35:44.744952Z"}],"euvd":[{"id":"EUVD-2015-7460","description":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.","status":"published","published":"2016-04-13T15:00:00Z","modified":"2024-08-06T07:51:28Z","updated_at":"2026-11-03T02:21:52.097705Z"}],"ghsa":[{"id":"GHSA-3rvg-chjx-7h2j","title":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4...","description":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.","status":"published","published":"2022-05-14T02:07:46Z","modified":"2023-02-02T05:05:29Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:52:07.125195Z"}],"nvd":[{"id":"CVE-2015-7545","description":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.","status":"published","published":"2016-04-13T15:59:01.32Z","modified":"2026-06-17T00:32:43.107Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-20","CWE-284"],"updated_at":"2026-11-02T14:03:16.97467Z"}],"osv":[{"id":"CVE-2015-7545","description":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.","status":"published","published":"2016-04-13T15:59:01Z","modified":"2026-04-10T03:45:26.51318Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-7545","description":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.","status":"published","published":"2016-04-13T15:59:01.32Z","modified":"2026-09-09T07:01:38.082058066Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"UBUNTU-CVE-2015-7545","description":"The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.","status":"published","published":"2015-12-09T00:00:00Z","modified":"2026-02-04T04:32:42.990497Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:10.737723Z"},{"id":"DSA-3435-1","title":"git - security update","status":"published","published":"2016-01-05T00:00:00Z","modified":"2026-03-09T01:18:11.317994Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"openSUSE-SU-2024:10070-1","title":"mercurial-4.0-1.1 on GA media","description":"These are all security issues fixed in the mercurial-4.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:54:02.990519Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"RHSA-2015:2515","title":"Red Hat Security Advisory: git19-git security update","status":"published","published":"2024-09-13T09:46:09Z","modified":"2026-06-29T10:10:38Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"RHSA-2015:2561","title":"Red Hat Security Advisory: git security update","status":"published","published":"2024-09-13T09:46:16Z","modified":"2026-06-29T10:10:45Z","updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"SUSE-SU-2015:2025-1","title":"Recommended update for git","description":"The git package was updated to fix the following security issue:\n\n- CVE-2015-7545: Fix remote code execution with recursive fetch of submodules (bsc#948969).\n","status":"published","published":"2015-12-19T11:23:02Z","modified":"2026-02-04T04:05:24.073581Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2325-1","title":"Recommended update for git","description":"The git package was updated to fix the following security issue:\n\n- CVE-2015-7545: Fix remote code execution with recursive fetch of submodules (bsc#948969).\n","status":"published","published":"2015-12-19T11:23:00Z","modified":"2026-02-04T02:35:07.962858Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"USN-2835-1","title":"git vulnerability","description":"Blake Burkhart discovered that the Git git-remote-ext helper incorrectly\nhandled recursive clones of git repositories. A remote attacker could\npossibly use this issue to execute arbitrary code by injecting commands\nvia crafted URLs.\n","status":"published","published":"2015-12-15T19:22:51Z","modified":"2026-02-10T04:40:56Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}