canonical / canonical/git-sync-rock

Vulnerabilities found for git-sync:4.7.0-26.04_49

Open
#28 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Just
Stars
1
Forks
0
PR merge metrics
No merged PRs in 30d

Description

## Vulnerabilities found for git-sync:4.7.0-26.04_49
| ID | Target | Severity | Package |
| -- | ----- | -------- | ------- |
| CVE-2026-27145 | /usr/bin/fast-exit | HIGH | stdlib |
| CVE-2026-33818 | /usr/bin/fast-exit | HIGH | stdlib |
| CVE-2026-39821 | /usr/bin/fast-exit | HIGH | stdlib |
| CVE-2026-39822 | /usr/bin/fast-exit | HIGH | stdlib |
| CVE-2026-56853 | /usr/bin/fast-exit | HIGH | stdlib |
| CVE-2026-56858 | /usr/bin/fast-exit | HIGH | stdlib |
| CVE-2026-56859 | /usr/bin/fast-exit | HIGH | stdlib |
| CVE-2026-56860 | /usr/bin/fast-exit | HIGH | stdlib |
| CVE-2026-56862 | /usr/bin/fast-exit | HIGH | stdlib |
| CVE-2026-27145 | /usr/bin/git-sync | HIGH | stdlib |
| CVE-2026-33818 | /usr/bin/git-sync | HIGH | stdlib |
| CVE-2026-39821 | /usr/bin/git-sync | HIGH | stdlib |
| CVE-2026-39822 | /usr/bin/git-sync | HIGH | stdlib |
| CVE-2026-56853 | /usr/bin/git-sync | HIGH | stdlib |
| CVE-2026-56858 | /usr/bin/git-sync | HIGH | stdlib |
| CVE-2026-56859 | /usr/bin/git-sync | HIGH | stdlib |
| CVE-2026-56860 | /usr/bin/git-sync | HIGH | stdlib |
| CVE-2026-56862 | /usr/bin/git-sync | HIGH | stdlib |

### Affected tracks:
- `4-26.04_edge`
- `4.7-26.04_edge`

Details: https://github.com/canonical/oci-factory/actions/runs/33458484321

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reviewing the vulnerability scan linked in the issue and the listed CVEs affecting /usr/bin/fast-exit and /usr/bin/git-sync. Check how the 4-26.04_edge and 4.7-26.04_edge tracks are built, then verify the scan no longer reports these vulnerabilities for the affected image.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.