tocsin

CVE-2023-22742

3 advisories.

crates.io/libgit2-sys CVE-2023-22742: medium 6.8, EPSS 0.58%

git2-rs fails to verify SSH keys by default

Action: Upgrade libgit2-sys to 0.13.5 or later.

cargo update -p libgit2-sys --precise 0.14.2
cargo update -p libgit2-sys --precise 0.13.5

Affected

introducedfixedlast affected
0.14.00.14.2-
00.13.5-

Fixed versions

0.14.20.13.5

Sources

CVE-2023-22742 · published · modified · JSON

crates.io/git2 CVE-2023-22742: medium 6.8, EPSS 0.58%

git2-rs fails to verify SSH keys by default

Action: Upgrade git2 to 0.16.1 or later.

cargo update -p git2 --precise 0.16.1

Affected

introducedfixedlast affected
00.16.1-

Fixed versions

0.16.1

Sources

CVE-2023-22742 · published · modified · JSON

crates.io/libgit2-sys CVE-2023-22742: unknown, EPSS 0.58%

git2 does not verify SSH keys by default

Action: Upgrade libgit2-sys to 0.13.5 or later.

cargo update -p libgit2-sys --precise 0.13.5
cargo update -p libgit2-sys --precise 0.14.2

Affected

introducedfixedlast affected
0.0.0-00.13.5-
0.14.00.14.2-

Fixed versions

0.13.50.14.2

Sources

CVE-2023-22742 · published · modified · JSON