p PatchFirst

openSUSE-SU-2026:21955-1

openSUSE-SU-2026:21955-1 · Security update for gitoxide

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for gitoxide fixes the following issues: Changes in gitoxide: - CVE-2026-91986: gix-transport CR/LF/NUL injection into git-daemon connect request via crafted git URL path, allowing virtual-host spoofing (boo#1281749)

Fix available

Published
Updated

Stack: system

Affected products and versions

  • gitoxide openSUSE:Leap 16.0

    Affected ranges
    • ECOSYSTEM: < 0.56.0-bp160.2.1

    Update to 0.56.0-bp160.2.1

Original sources

Check your server →