Red Hat Security AdvisoryRHSA-2013:0589
git security update
Released 2013-03-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) emacs-git-1.7.1-3.el6_4.1, emacs-git-el-1.7.1-3.el6_4.1, git-1.7.1-3.el6_4.1 +9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) emacs-git-1.7.1-3.el6_4.1, emacs-git-el-1.7.1-3.el6_4.1, git-1.7.1-3.el6_4.1 +9
- Red Hat Enterprise Linux Server (v. 6) git-1.7.1-3.el6_4.1, perl-Git-1.7.1-3.el6_4.1
- Red Hat Enterprise Linux Server Optional (v. 6) emacs-git-1.7.1-3.el6_4.1, emacs-git-el-1.7.1-3.el6_4.1, git-1.7.1-3.el6_4.1 +8
- Red Hat Enterprise Linux Workstation (v. 6) git-1.7.1-3.el6_4.1, perl-Git-1.7.1-3.el6_4.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) emacs-git-1.7.1-3.el6_4.1, emacs-git-el-1.7.1-3.el6_4.1, git-1.7.1-3.el6_4.1 +8
Fixes 1 record
Priority LOW 23
The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middl…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01661 · Published 2013-03-08 · Fixed CWE-20
