CVE-2022-41903, CVE-2022-23521 - upgrade git

[Pandiyan Muthuraman]

Hi Team,

May I know how to ensure which version of git am using in my crucible application and how to upgrade ?

Thanks

Pandiyan

[Martin Runge]

Hi @Pandiyan Muthuraman

This answer is a bit late: Unlike some other developer tools, Fisheye and Crucible do not include an embedded Git executable. Instead, the application relies entirely on the native Git binary installed on your host operating system.

To patch the security vulnerabilities (CVE-2022-41903 and CVE-2022-23521), check which binary Crucible is using and upgrade the Git installation on the server.

Do not forget to restart your Fisheye/Crucible instance to ensure it uses the updated binary correctly.

Cheers, Martin