Skip to content
OpenAdvisories
High DSA-5619-1 1 CVE

libgit2 - security update

Published Feb 9, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 11 libgit2 1.1.0+dfsg.1-4+deb11u2
Debian · 12 libgit2 1.5.1+ds-1+deb12u1

Vulnerabilities 1

  • High 8.6
    CVE-2024-24577

    libgit2 is vulnerable to arbitrary code execution due to heap corruption in `git_index_add`

    libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to `git_index_add` can cause heap corruption that could be lev…

    libgit2 libgit2 libgit2 libgit2 Debian Ubuntu Azure Linux Alpine Wolfi