Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/libgit2@0.25.1-r0?arch=aarch64&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/libgit2@0.25.1-r0?arch=aarch64&distroversion=v3.7&reponame=main
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (3)
Vulnerability Summary Aliases
VCID-bejf-17ah-tybt Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspecified impact via a crafted non-flush packet. CVE-2016-10128
VCID-rvbe-y541-nyh7 The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line. CVE-2016-10129
VCID-xab7-k14p-uqbx The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variable. CVE-2016-10130

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-03T17:47:44.888261+00:00 Alpine Linux Importer Fixing VCID-rvbe-y541-nyh7 https://secdb.alpinelinux.org/v3.7/main.json 38.1.0
2026-04-01T19:23:46.376242+00:00 Alpine Linux Importer Fixing VCID-bejf-17ah-tybt https://secdb.alpinelinux.org/v3.7/main.json 38.0.0
2026-04-01T18:55:35.306514+00:00 Alpine Linux Importer Fixing VCID-xab7-k14p-uqbx https://secdb.alpinelinux.org/v3.7/main.json 38.0.0