Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Eclipse JGit library can be exploited, update required
published 3 months ago
Summary
The Eclipse JGit components used for handling Git repositories have a security weakness that could allow an attacker to run malicious code. Updating to the latest version (5.13.3.202401111512-r-tuxcare.1) fixes the issue. Apply the update as soon as possible to keep your systems safe.
What to do
- Update eclipse org.eclipse.jgit:org.eclipse.jgit to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit-parent to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.ant to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.archive to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.gpg.bc to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.http.apache to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.http.server to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.junit to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.junit.http to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.junit.ssh to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.lfs to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.lfs.server to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.pgm to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.ssh.apache to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.ssh.jsch to version 5.13.3.202401111512-r-tuxcare.1.
- Update eclipse org.eclipse.jgit:org.eclipse.jgit.ui to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.ant to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.archive to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.gpg.bc to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.http.apache to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.http.server to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.junit to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.junit.http to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.junit.ssh to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.lfs to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.lfs.server to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.pgm to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.ssh.apache to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.ssh.jsch to version 5.13.3.202401111512-r-tuxcare.1.
- Update org.eclipse.jgit:org.eclipse.jgit.ui to version 5.13.3.202401111512-r-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit-parent |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.ant |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.archive |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.gpg.bc |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.http.apache |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.http.server |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.junit |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.junit.http |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.junit.ssh |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.lfs |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.lfs.server |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.pgm |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.ssh.apache |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.ssh.jsch |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | eclipse | org.eclipse.jgit:org.eclipse.jgit.ui |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.ant |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.archive |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.gpg.bc |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.http.apache |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.http.server |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.junit |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.junit.http |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.junit.ssh |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.lfs |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.lfs.server |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.pgm |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.ssh.apache |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.ssh.jsch |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
| TuxCare:Maven | – | org.eclipse.jgit:org.eclipse.jgit.ui |
>= 5.13.3.202401111512-r, < 5.13.3.202401111512-r-tuxcare.1 Fix: upgrade to 5.13.3.202401111512-r-tuxcare.1
|
Original advisory text
TuxCare security update for org.eclipse.jgit:org.eclipse.jgit (1 CVE)
TuxCare rebuilt org.eclipse.jgit:org.eclipse.jgit to address 1 CVE. Fixed in 5.13.3.202401111512-r-tuxcare.1.
Timeline
Published4 Aug 2026
Updated2 Nov 2026
First seen15 Oct 2026
Sources
CLSA-2026-1770077339 · OSV
Track software like this
Free during beta