Skip to content
OpenAdvisories
High DLA-3742-1 1 CVE

libgit2 - security update

Published Feb 27, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 libgit2 0.27.7+dfsg.1-0.2+deb10u2

Vulnerabilities 1

  • High 8.6
    CVE-2024-24577

    libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to `git_index_add` can cause heap corruption that could be lev…

    libgit2 libgit2 libgit2 libgit2 Debian Ubuntu Azure Linux Alpine Wolfi