{"id":"CVE-2026-53587","aliases":["ALPINE-CVE-2026-53587","ALSA-2026:67285","ALSA-2026:67286","AZL-96968","BELL-CVE-2026-53587","CLSA-2026-1790157025","DEBIAN-CVE-2026-53587","EUVD-2026-63547","GHSA-pm24-4jhq-3xvm","JLSEC-2026-1373","MGASA-2026-0570","RHSA-2026:59361","RHSA-2026:67285","RHSA-2026:67286","RHSA-2026:69096","RHSA-2026:69097","RHSA-2026:69109","RLSA-2026:67285","RLSA-2026:67286","UBUNTU-CVE-2026-53587","openSUSE-SU-2026:11315-1"],"status":"published","title":"libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0047,"percentile":0.40992,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-125","CWE-126","CWE-1284","CWE-20"],"published":"2026-07-20T00:00:00Z","modified":"2026-11-05T05:40:51Z","exploits":[{"source":"pocgithub","id":"Alixploit22/CVE-2026-53587","title":"Alixploit22/CVE-2026-53587","date":"2026-08-15","url":"https://github.com/Alixploit22/CVE-2026-53587"}],"fixes":[{"ecosystem":"Alpine:v3.23","package":"libgit2","fixed_in":["1.9.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libgit2","fixed_in":["1.9.6-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"cargo","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"clippy","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-analyzer","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-debugger-common","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-doc","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-gdb","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-lldb","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-src","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-std-static","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-std-static-wasm32-unknown-unknown","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-std-static-wasm32-wasip1","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rust-toolset","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"rustfmt","fixed_in":["1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"cargo","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"clippy","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-analyzer","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-debugger-common","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-doc","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-gdb","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-lldb","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-src","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-std-static","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-std-static-aarch64-unknown-none-softfloat","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-std-static-wasm32-unknown-unknown","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-std-static-wasm32-wasip1","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-std-static-x86_64-unknown-none","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-toolset","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rust-toolset-srpm-macros","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"rustfmt","fixed_in":["1.92.0-2.el10_2.alma.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libgit2","fixed_in":["1.7.2-3"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"libgit2","fixed_in":["1.9.6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"libgit2","fixed_in":["1.9.6-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"cargo","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"clippy","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-analyzer","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-debugger-common","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-doc","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-gdb","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-lldb","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-src","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-std-static","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-std-static-wasm32-unknown-unknown","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-std-static-wasm32-wasip1","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-toolset","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"rustfmt","fixed_in":["1.84.1-1.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libgit2","fixed_in":["1.9.0+ds-2+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libgit2","fixed_in":["1.9.6+ds-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"LibGit2_jll","fixed_in":["1.9.6+0"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cargo","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cargo-debuginfo","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"clippy","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"clippy-debuginfo","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-analyzer","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-analyzer-debuginfo","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-debugger-common","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-debuginfo","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-debugsource","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-doc","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-gdb","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-lldb","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-src","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-std-static","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-std-static-debuginfo","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-std-static-wasm32-unknown-unknown","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-std-static-wasm32-wasip1","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-toolset","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rustfmt","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rustfmt-debuginfo","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"cargo","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"cargo-debuginfo","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"clippy","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"clippy-debuginfo","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-analyzer","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-analyzer-debuginfo","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-debugger-common","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-debuginfo","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-debugsource","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-doc","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-gdb","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-lldb","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-src","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-debuginfo","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-wasm32-unknown-unknown","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-wasm32-wasip1","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-toolset","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-toolset-srpm-macros","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rustfmt","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rustfmt-debuginfo","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-aarch64-unknown-none-softfloat","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-x86_64-unknown-none","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cargo","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cargo-debuginfo","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"clippy","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"clippy-debuginfo","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-analyzer","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-analyzer-debuginfo","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-debugger-common","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-debuginfo","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-debugsource","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-doc","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-gdb","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-lldb","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-src","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-debuginfo","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-wasm32-unknown-unknown","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-wasm32-wasip1","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-toolset","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-toolset-srpm-macros","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rustfmt","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rustfmt-debuginfo","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-aarch64-unknown-none-softfloat","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-x86_64-unknown-none","fixed_in":["0:1.84.1-1.el10_0.4"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"cargo","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"cargo-debuginfo","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"clippy","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"clippy-debuginfo","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-analyzer","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-analyzer-debuginfo","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-debugger-common","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-debuginfo","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-debugsource","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-doc","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-gdb","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-lldb","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-src","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-std-static","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-std-static-wasm32-unknown-unknown","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-std-static-wasm32-wasi","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-toolset","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rustfmt","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rustfmt-debuginfo","fixed_in":["0:1.75.0-1.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"cargo","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"cargo-debuginfo","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"clippy","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"clippy-debuginfo","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-analyzer","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-analyzer-debuginfo","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-debugger-common","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-debuginfo","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-debugsource","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-doc","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-gdb","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-lldb","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-src","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-std-static","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-std-static-debuginfo","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-std-static-wasm32-unknown-unknown","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-std-static-wasm32-wasip1","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-toolset","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rustfmt","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rustfmt-debuginfo","fixed_in":["0:1.84.1-1.el9_6.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"rust","fixed_in":["0:1.92.0-2.el9_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"rust","fixed_in":["0:1.92.0-2.el10_2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"libgit2","fixed_in":["1.7.2+ds-1ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"libgit2","fixed_in":["1.9.1+ds-1ubuntu1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"clippy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-debugger-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-lldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-std-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-std-static-wasm32-unknown-unknown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-std-static-wasm32-wasip1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rust-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"rustfmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"clippy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-debugger-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-lldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-std-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-std-static-aarch64-unknown-none-softfloat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-std-static-wasm32-unknown-unknown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-std-static-wasm32-wasip1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-std-static-x86_64-unknown-none","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rust-toolset-srpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"rustfmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.92.0-2.el10_2.alma.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-3"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.9.0-r2"},{"fixed":"1.9.6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.1-r0"},{"fixed":"1.9.6-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"clippy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-debugger-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-lldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-std-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-std-static-wasm32-unknown-unknown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-std-static-wasm32-wasip1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rust-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"rustfmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.84.1-1.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0+ds-2+deb13u1"}]}],"versions":["1.9.0+ds-2"]},{"source":"osv","ecosystem":"Debian:14","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6+ds-1"}]}],"versions":["1.9.0+ds-2","1.9.1+ds-1","1.9.2+ds-1","1.9.2+ds-2","1.9.2+ds-3","1.9.2+ds-4","1.9.2+ds-5","1.9.2+ds-6","1.9.2+ds-7","1.9.2+ds-8","1.9.2+ds-9","1.9.3+ds-1","1.9.4+ds-1"]},{"source":"osv","ecosystem":"Julia","package":"LibGit2_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.9.6+0"}]}]},{"source":"osv","ecosystem":"Mageia:10","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2-1.1.mga10"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.7-1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"libgit2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.7-1.hum1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"cargo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"clippy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"clippy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-analyzer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-debugger-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-lldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-std-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-std-static-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-std-static-wasm32-unknown-unknown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-std-static-wasm32-wasip1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rust-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rustfmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"rustfmt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"cargo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"clippy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"clippy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-analyzer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-debugger-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-lldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-wasm32-unknown-unknown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-wasm32-wasip1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-toolset-srpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rustfmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rustfmt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-aarch64-unknown-none-softfloat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"rust-std-static-x86_64-unknown-none","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"cargo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"clippy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"clippy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-analyzer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-debugger-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-lldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-wasm32-unknown-unknown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-wasm32-wasip1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-toolset-srpm-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rustfmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rustfmt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-aarch64-unknown-none-softfloat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"rust-std-static-x86_64-unknown-none","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el10_0.4"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"cargo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"clippy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"clippy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-analyzer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-debugger-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-lldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-std-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-std-static-wasm32-unknown-unknown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-std-static-wasm32-wasi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rust-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rustfmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"rustfmt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.75.0-1.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"cargo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"cargo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"clippy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"clippy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-analyzer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-analyzer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-debugger-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-lldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-std-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-std-static-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-std-static-wasm32-unknown-unknown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-std-static-wasm32-wasip1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rust-toolset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rustfmt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"rustfmt-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.84.1-1.el9_6.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el9_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"rust","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.92.0-2.el10_2"}]}]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2+ds-1ubuntu3.1"}]}],"versions":["1.5.1+ds-1ubuntu1","1.7.1+ds-2ubuntu1","1.7.2+ds-1ubuntu1","1.7.2+ds-1ubuntu2","1.7.2+ds-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1+ds-1ubuntu1.1"}]}],"versions":["1.9.0+ds-2ubuntu2","1.9.1+ds-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libgit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-1.1"}]}],"bundled":5}],"products":[{"vendor":"libgit2","product":"libgit2"}],"references":[{"url":"https://github.com/libgit2/libgit2/security/advisories/GHSA-pm24-4jhq-3xvm","tags":["x_refsource_CONFIRM","exploit","advisory","web","article","report"]},{"url":"https://github.com/libgit2/libgit2/commit/2c0ce8c0132ac38ab0db28239462a671e2e5440e","tags":["x_refsource_MISC","fix","web","article"]},{"url":"https://github.com/libgit2/libgit2/commit/affda60c10fcef16723451c0d7dc71b71dc20ad3","tags":["x_refsource_MISC","fix","web","article"]},{"url":"https://github.com/libgit2/libgit2/commit/d7a9fb87f504434e9f45228678953c4fa56e7640","tags":["x_refsource_MISC","fix","web","article"]},{"url":"https://github.com/libgit2/libgit2/releases/tag/v1.8.6","tags":["x_refsource_MISC","web","article"]},{"url":"https://github.com/libgit2/libgit2/releases/tag/v1.9.5","tags":["x_refsource_MISC","web","article"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-53587","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67285","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53587","tags":["report"]},{"url":"https://bugzilla.redhat.com/2520693","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-67285.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67286","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-67286.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53587","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-53587","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790157025.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53587.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-53587","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0570.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35993","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VHH635RSSSNGD55XOG7MSUBAC6CK77E2/","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2026/08/20/4","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-8628-1","tags":["advisory"]},{"url":"https://lists.debian.org/debian-security-announce/2026/msg00364.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:59361","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53586","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53584","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53585","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-53583","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_59361.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520694","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53583","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53583","tags":["advisory"]},{"url":"https://github.com/libgit2/libgit2/commit/647dcb432980b84ede4cb5a008bbd1ccb4ead03d","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/commit/c2aa35409ee0e6515df64da49750f13a0a42c47f","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/commit/ef086bc3e4eedf62be38a910381aae24d49871ff","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/security/advisories/GHSA-h7gc-w2gg-p9xp","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520695","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53584","tags":["advisory"]},{"url":"https://github.com/libgit2/libgit2/commit/419637d3587396f5d139d6d88480eab3cd81e7a1","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/commit/467c2d95ed663df722f83a5960edf568514b128c","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/commit/ec7371da9f359cd8293e9108e7a0b1c1b61b67c4","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/security/advisories/GHSA-cw77-j82w-mchm","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520696","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53585","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53585","tags":["advisory"]},{"url":"https://github.com/libgit2/libgit2/commit/0cdfdd5fa8f8514c82413025e1e0808866cf7c30","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/commit/c1896f06df22cc0ca5658df3a8f6cd7ede4cd6ae","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/commit/dec22ac01ad9620c96b7b9ac3ef636ea46d43bed","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/security/advisories/GHSA-27m5-gxxh-x79j","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53586","tags":["advisory"]},{"url":"https://github.com/libgit2/libgit2/commit/07de6a7e438f95ac9a6efd3222a82117e871ed27","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/commit/af2b29ad0a74d5bac9751376879ddaf848136d3b","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/commit/c1507abc44647b3acd832a33a5b1c8c9f5ba8821","tags":["article"]},{"url":"https://github.com/libgit2/libgit2/security/advisories/GHSA-2889-x8f6-mc4x","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2520693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-53587","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67285.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67286.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69096","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69096.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69097","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69097.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69109","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69109.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:67285","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:67286","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-53587","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-53587","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-53587","title":"libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","status":"published","published":"2026-08-20T18:36:43.055Z","modified":"2026-08-20T19:18:33.821Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20","CWE-125","CWE-126","CWE-1284"],"updated_at":"2026-11-02T14:19:59.761005Z"}],"euvd":[{"id":"EUVD-2026-63547","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","status":"published","published":"2026-08-20T18:36:43Z","modified":"2026-08-20T19:18:33Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:01:38.846525Z"}],"nvd":[{"id":"CVE-2026-53587","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","status":"published","published":"2026-08-20T19:16:55.137Z","modified":"2026-10-26T10:10:00.14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20","CWE-125","CWE-126","CWE-1284"],"updated_at":"2026-11-02T14:12:40.302911Z"}],"osv":[{"id":"ALPINE-CVE-2026-53587","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","status":"published","published":"2026-08-20T19:16:55.137Z","modified":"2026-11-03T06:33:05.988612899Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:15:37.282377Z"},{"id":"BELL-CVE-2026-53587","status":"published","published":"2026-07-23T10:20:03.334307Z","modified":"2026-08-22T07:15:02.634350862Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:24.657778Z"},{"id":"CVE-2026-53587","title":"libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","status":"published","published":"2026-08-20T18:36:43.055Z","modified":"2026-10-28T11:09:50.790411933Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125","CWE-126","CWE-1284","CWE-20"],"updated_at":"2026-11-02T15:45:08.132336Z"},{"id":"DEBIAN-CVE-2026-53587","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","status":"published","published":"2026-08-20T19:16:55.137Z","modified":"2026-10-27T09:47:36.657351314Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:57.236551Z"},{"id":"JLSEC-2026-1373","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in `set_data` in `src/libgit2/transports/smart_pkt.c` without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing `format_str` to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","status":"published","published":"2026-08-21T21:14:18.508Z","modified":"2026-08-21T21:30:03.330665751Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"RHSA-2026:59361","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-08-25T10:23:28Z","modified":"2026-10-06T10:31:28.939470342Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:67285","title":"Red Hat Security Advisory: rust security update","status":"published","published":"2026-09-15T10:17:06Z","modified":"2026-09-22T10:18:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:67286","title":"Red Hat Security Advisory: rust security update","status":"published","published":"2026-09-15T10:17:07Z","modified":"2026-09-22T10:18:31Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69096","title":"Red Hat Security Advisory: rust security update","status":"published","published":"2026-09-21T10:14:43Z","modified":"2026-09-22T10:19:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69097","title":"Red Hat Security Advisory: rust security update","status":"published","published":"2026-09-21T10:14:44Z","modified":"2026-09-22T10:19:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69109","title":"Red Hat Security Advisory: rust security update","status":"published","published":"2026-09-21T10:14:48Z","modified":"2026-09-22T10:19:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:67285","title":"Important: rust security update","description":"Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety.  This package includes the Rust compiler and documentation generator.\n\nSecurity Fix(es):\n\n* libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server (CVE-2026-53587)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-15T18:05:37.908911Z","modified":"2026-09-15T18:30:36.360954337Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:67286","title":"Important: rust security update","description":"Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety.  This package includes the Rust compiler and documentation generator.\n\nSecurity Fix(es):\n\n* libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server (CVE-2026-53587)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-15T12:08:56.876794Z","modified":"2026-09-15T12:30:03.816624361Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-53587","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","status":"published","published":"2026-07-31T00:00:00Z","modified":"2026-09-02T19:35:54.110744283Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:41.382716Z"},{"id":"ALSA-2026:67285","title":"Important: rust security update","description":"Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator.  \n\nSecurity Fix(es):  \n\n  * libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server (CVE-2026-53587)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-14T00:00:00Z","modified":"2026-10-29T11:32:32.048427272Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:67286","title":"Important: rust security update","description":"Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator.  \n\nSecurity Fix(es):  \n\n  * libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server (CVE-2026-53587)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-14T00:00:00Z","modified":"2026-10-29T11:30:41.215095733Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-96968","title":"CVE-2026-53587 affecting package libgit2 for versions less than 1.7.2-3","description":"libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in set_data in src/libgit2/transports/smart_pkt.c without first verifying that the smart-protocol pkt-line capability buffer contains 14 bytes. A malicious Git server can make bytes after the pkt-line complete object-format=, causing format_str to advance beyond the pkt-line and the following memchr length calculation to underflow. The resulting heap out-of-bounds walk can crash a client during the first refs-advertisement packet over HTTP, HTTPS, SSH, or the Git protocol. This issue is fixed in versions 1.8.6 and 1.9.5.","status":"published","published":"2026-08-20T19:16:55Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:26.280152Z"},{"id":"CLSA-2026-1790157025","title":"rust: Fix of CVE-2026-53587","description":"- CVE-2026-53587: bounds-check the capability buffer before the fixed-size\n  object-format= comparison in set_data, so a short pkt-line cannot cause a\n  heap out-of-bounds read (vendored libgit2 1.8.1; the vendored libgit2 1.3.0\n  copy has no object-format parsing and is unaffected)","status":"published","published":"2026-09-23T09:50:35Z","modified":"2026-10-26T09:31:35.730288194Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"MGASA-2026-0570","title":"Updated libgit2 package fixes security vulnerabilities","description":"Inverted IP SubjectAltName Comparison in OpenSSL Backend.\n(CVE-2026-53583)\nSubmodule path traversal. (CVE-2026-53584)\nUnbounded Memory Allocation via Delta Object Result-Size Header.\n(CVE-2026-53585)\nHTTP transport can leak credentials to an offsite redirect target.\n(CVE-2026-53586)\nUnauthenticated network-reachable heap out-of-bounds read in\ntransports/smart_pkt.c:set_data. (CVE-2026-53587)\nShell Command Injection via ssh_libssh2 Backend. (CVE-2026-5917)\n","status":"published","published":"2026-10-30T15:30:36Z","modified":"2026-10-30T15:45:02.524280865Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11315-1","title":"libgit2-1_9-1.9.6-1.1 on GA media","description":"These are all security issues fixed in the libgit2-1_9-1.9.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-20T00:00:00Z","modified":"2026-07-21T09:45:08.150224589Z","updated_at":"2026-11-02T16:58:38.95195Z"}]}}