Eclipse Community Forums: EGit / JGit » CVE-2022-41903, and CVE-2022-23521

Help

Home

Home » Eclipse Projects » EGit / JGit » CVE-2022-41903, and CVE-2022-23521

Show: Today's Messages :: Show Polls :: Message Navigator

CVE-2022-41903, and CVE-2022-23521 [message #1857186]

Mon, 23 January 2023 13:27

Paulo F

Messages: 1
Registered: January 2023

Junior Member

Good Morning guys.
Is JGit also susceptible to these vulnerabilities?

Can't post URL:

www.bleepingcomputer.com/news/security/git-patches-two-critical-remote-code-execution-security-flaws/
github.blog/2023-01-17-git-security-vulnerabilities-announced-2/

Report message to a moderator

Re: CVE-2022-41903, and CVE-2022-23521 [message #1857188 is a reply to message #1857186]

Mon, 23 January 2023 14:43

Ed Merks

Messages: 33141
Registered: July 2009

Senior Member

JGit is written purely in Java so it is not possible to arbitrarily corrupt memory (or the heap) as is possible in native git's C/C++ implementation which is exploited in the CVEs you mention.

Ed Merks
Professional Support: https://www.macromodeling.com/

Report message to a moderator

Previous Topic:	How to set GIT_LFS_SKIP_SMUDGE=1 for CloneCommand
Next Topic:	Git-upload-pack not permitted on Github

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Apr 26 04:19:35 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter