Eclipse Community Forums: EGit / JGit » CVE-2022-41903, and CVE-2022-23521

Home » Eclipse Projects » EGit / JGit » CVE-2022-41903, and CVE-2022-23521

CVE-2022-41903, and CVE-2022-23521 [message #1857186]

Mon, 23 January 2023 08:27

Eclipse User

Good Morning guys.
Is JGit also susceptible to these vulnerabilities?

Can't post URL:

www.bleepingcomputer.com/news/security/git-patches-two-critical-remote-code-execution-security-flaws/
github.blog/2023-01-17-git-security-vulnerabilities-announced-2/

Re: CVE-2022-41903, and CVE-2022-23521 [message #1857188 is a reply to message #1857186]

Mon, 23 January 2023 09:43

Eclipse User

JGit is written purely in Java so it is not possible to arbitrarily corrupt memory (or the heap) as is possible in native git's C/C++ implementation which is exploited in the CVEs you mention.

Previous Topic:	How to set GIT_LFS_SKIP_SMUDGE=1 for CloneCommand
Next Topic:	Git-upload-pack not permitted on Github

Goto Forum:

-=] Back to Top [=-

Current Time: Wed May 21 11:55:19 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter