jprdonnelly/docs
1
0
Fork 0
mirror of synced 2025-12-30 03:01:36 -05:00
Code Issues Projects Releases Wiki Activity

Delete duplicated security fix entry of CVE-2023-22490 and CVE-2023-23946 (#38603)

Browse Source
This commit is contained in:
Kensuke Nagae
2023-06-28 18:11:18 +09:00
committed by GitHub
parent 046ffdab08
commit d53bed25e5
6 changed files with 0 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
data/release-notes/enterprise-server/3-5/17.yml
View File

@@ -1,8 +1,6 @@
date: '2023-05-09'
sections:
security_fixes:
- |
**HIGH:** Updated Git to include fixes from 2.39.2, which address [CVE-2023-22490](https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q) and [CVE-2023-23946](https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh).
- |
**MEDIUM**: Updated Git to include fixes from 2.40.1. For more information, see [Git security vulnerabilities announced](https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/) on the GitHub Blog.
bugs:

2
data/release-notes/enterprise-server/3-5/19.yml
View File

@@ -1,8 +1,6 @@
date: '2023-06-20'
sections:
security_fixes:
- |
**HIGH:** Updated Git to include fixes from 2.39.2, which address [CVE-2023-22490](https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q) and [CVE-2023-23946](https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh).
- |
**MEDIUM**: Scoped installation tokens for a GitHub App kept approved permissions after the permissions on the integration installation were downgraded or removed. GitHub has requested CVE ID [CVE-2023-23765](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23765) for this vulnerability, which was reported via the [GitHub Bug Bounty program](https://bounty.github.com).
- |

2
data/release-notes/enterprise-server/3-6/13.yml
View File

@@ -1,8 +1,6 @@
date: '2023-05-09'
sections:
security_fixes:
- |
**HIGH:** Updated Git to include fixes from 2.39.2, which address [CVE-2023-22490](https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q) and [CVE-2023-23946](https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh).
- |
**MEDIUM**: Updated Git to include fixes from 2.40.1. For more information, see [Git security vulnerabilities announced](https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/) on the GitHub Blog.
bugs:

2
data/release-notes/enterprise-server/3-6/15.yml
View File

@@ -1,8 +1,6 @@
date: '2023-06-20'
sections:
security_fixes:
- |
**HIGH:** Updated Git to include fixes from 2.39.2, which address [CVE-2023-22490](https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q) and [CVE-2023-23946](https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh).
- |
If a user's request to the instance's API included authentication credentials within a URL parameter, administrators could see the credentials in JSON within the instance's audit log.
- Packages have been updated to the latest security versions.

2
data/release-notes/enterprise-server/3-7/10.yml
View File

@@ -1,8 +1,6 @@
date: '2023-05-09'
sections:
security_fixes:
- |
**HIGH:** Updated Git to include fixes from 2.39.2, which address [CVE-2023-22490](https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q) and [CVE-2023-23946](https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh).
- |
**MEDIUM**: Updated Git to include fixes from 2.40.1. For more information, see [Git security vulnerabilities announced](https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/) on the GitHub Blog.
bugs:

2
data/release-notes/enterprise-server/3-7/12.yml
View File

@@ -1,8 +1,6 @@
date: '2023-06-20'
sections:
security_fixes:
- |
**HIGH:** Updated Git to include fixes from 2.39.2, which address [CVE-2023-22490](https://github.com/git/git/security/advisories/GHSA-gw92-x3fm-3g3q) and [CVE-2023-23946](https://github.com/git/git/security/advisories/GHSA-r87m-v37r-cwfh).
- |
**MEDIUM**: Updated Git to include fixes from [2.40.1](https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/).
- |