StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · git

`git` CVE matrix across Linux distros

344 CVEs tracked across 8 distro releases. Showing the 200 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2010-3906→ fixed in1:1.7.2.3-2.2
CVE-2014-9390→ fixed in1:2.1.4-1
CVE-2014-9938→ fixed in1:2.0.0~rc2-1
CVE-2015-7545→ fixed in1:2.6.1-1
CVE-2016-2315→ fixed in1:2.7.0-1
CVE-2016-2324→ fixed in1:2.8.0~rc3-1
CVE-2017-1000117→ fixed in1:2.14.1-1
CVE-2017-14867→ fixed in1:2.14.2-1
+24 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y git

Debian bookworm

Source: Debian

CVE-2010-3906→ fixed in1:1.7.2.3-2.2
CVE-2014-9390→ fixed in1:2.1.4-1
CVE-2014-9938→ fixed in1:2.0.0~rc2-1
CVE-2015-7545→ fixed in1:2.6.1-1
CVE-2016-2315→ fixed in1:2.7.0-1
CVE-2016-2324→ fixed in1:2.8.0~rc3-1
CVE-2017-1000117→ fixed in1:2.14.1-1
CVE-2017-14867→ fixed in1:2.14.2-1
+24 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y git

Debian trixie

Source: Debian

CVE-2010-3906→ fixed in1:1.7.2.3-2.2
CVE-2014-9390→ fixed in1:2.1.4-1
CVE-2014-9938→ fixed in1:2.0.0~rc2-1
CVE-2015-7545→ fixed in1:2.6.1-1
CVE-2016-2315→ fixed in1:2.7.0-1
CVE-2016-2324→ fixed in1:2.8.0~rc3-1
CVE-2017-1000117→ fixed in1:2.14.1-1
CVE-2017-14867→ fixed in1:2.14.2-1
+24 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y git

Alpine v3.20

Source: Alpine secdb

CVE-2017-1000117→ fixed in2.14.1-r0
CVE-2018-11233→ fixed in2.17.1-r0
CVE-2018-11235→ fixed in2.17.1-r0
CVE-2018-17456→ fixed in2.19.1-r0
CVE-2019-1348→ fixed in2.24.1-r0
CVE-2019-1349→ fixed in2.24.1-r0
CVE-2019-1350→ fixed in2.24.1-r0
CVE-2019-1351→ fixed in2.24.1-r0
+13 more in Alpine v3.20

Single command to patch all of these:

apk add --upgrade git

Alpine v3.21

Source: Alpine secdb

CVE-2017-1000117→ fixed in2.14.1-r0
CVE-2018-11233→ fixed in2.17.1-r0
CVE-2018-11235→ fixed in2.17.1-r0
CVE-2018-17456→ fixed in2.19.1-r0
CVE-2019-1348→ fixed in2.24.1-r0
CVE-2019-1349→ fixed in2.24.1-r0
CVE-2019-1350→ fixed in2.24.1-r0
CVE-2019-1351→ fixed in2.24.1-r0
+13 more in Alpine v3.21

Single command to patch all of these:

apk add --upgrade git

Alpine edge

Source: Alpine secdb

CVE-2017-1000117→ fixed in2.14.1-r0
CVE-2018-11233→ fixed in2.17.1-r0
CVE-2018-11235→ fixed in2.17.1-r0
CVE-2018-17456→ fixed in2.19.1-r0
CVE-2019-1348→ fixed in2.24.1-r0
CVE-2019-1349→ fixed in2.24.1-r0
CVE-2019-1350→ fixed in2.24.1-r0
CVE-2019-1351→ fixed in2.24.1-r0
+13 more in Alpine edge

Single command to patch all of these:

apk add --upgrade git

Alpine v3.18

Source: Alpine secdb

CVE-2017-1000117→ fixed in2.14.1-r0
CVE-2018-11233→ fixed in2.17.1-r0
CVE-2018-11235→ fixed in2.17.1-r0
CVE-2018-17456→ fixed in2.19.1-r0
CVE-2019-1348→ fixed in2.24.1-r0
CVE-2019-1349→ fixed in2.24.1-r0
CVE-2019-1350→ fixed in2.24.1-r0
CVE-2019-1351→ fixed in2.24.1-r0
+13 more in Alpine v3.18

Single command to patch all of these:

apk add --upgrade git

Alpine v3.19

Source: Alpine secdb

CVE-2017-1000117→ fixed in2.14.1-r0
CVE-2018-11233→ fixed in2.17.1-r0
CVE-2018-11235→ fixed in2.17.1-r0
CVE-2018-17456→ fixed in2.19.1-r0
CVE-2019-1348→ fixed in2.24.1-r0
CVE-2019-1349→ fixed in2.24.1-r0
CVE-2019-1350→ fixed in2.24.1-r0
CVE-2019-1351→ fixed in2.24.1-r0
+12 more in Alpine v3.19

Single command to patch all of these:

apk add --upgrade git

Is YOUR git patched?

5-second check on your actual server. The quickscan reads your installed git version and matches against the same 344-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)