Red Hat Security AdvisoryRHSA-2010:1003
git security update
Released 2010-12-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) emacs-git-1.7.1-2.el6_0.1, emacs-git-el-1.7.1-2.el6_0.1, git-1.7.1-2.el6_0.1 +9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) emacs-git-1.7.1-2.el6_0.1, emacs-git-el-1.7.1-2.el6_0.1, git-1.7.1-2.el6_0.1 +9
- Red Hat Enterprise Linux Server (v. 6) git-1.7.1-2.el6_0.1, perl-Git-1.7.1-2.el6_0.1
- Red Hat Enterprise Linux Server Optional (v. 6) emacs-git-1.7.1-2.el6_0.1, emacs-git-el-1.7.1-2.el6_0.1, git-1.7.1-2.el6_0.1 +8
- Red Hat Enterprise Linux Workstation (v. 6) git-1.7.1-2.el6_0.1, perl-Git-1.7.1-2.el6_0.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) emacs-git-1.7.1-2.el6_0.1, emacs-git-el-1.7.1-2.el6_0.1, git-1.7.1-2.el6_0.1 +8
Fixes 1 record
Priority LOW 29
Cross-site scripting (XSS) vulnerability in Gitweb 1.7.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) f and (2) fp parameters.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05614 · Published 2010-12-17 · Fixed CWE-79
