Libgit2 -- multiple vulnerabilities
The Git community reports:
A carefully constructed commit object with a very large number
of parents may lead to potential out-of-bounds writes or
potential denial of service.
The ProgramData configuration file is always read for compatibility
with Git for Windows and Portable Git installations. The ProgramData
location is not necessarily writable only by administrators, so we
now ensure that the configuration file is owned by the administrator
or the current user.
Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright