Skip to content
OpenAdvisories
Medium DSA-4659-1 1 CVE

git - security update

Published Apr 20, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 10 git 1:2.20.1-2+deb10u3
Debian · 9 git 1:2.11.0-3+deb9u7

Vulnerabilities 1

  • Medium 4.0
    CVE-2020-11008

    Malicious URLs can still cause Git to send a stored credential to the wrong server

    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that bug still left the door open for an expl…

    git git git git Debian Ubuntu Alpine