Red Hat Security AdvisoryRHSA-2016:0496
git security update
Released 2016-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) emacs-git-1.8.3.1-6.el7_2.1, emacs-git-el-1.8.3.1-6.el7_2.1, git-1.8.3.1-6.el7_2.1 +13
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) emacs-git-1.8.3.1-6.el7_2.1, emacs-git-el-1.8.3.1-6.el7_2.1, git-1.8.3.1-6.el7_2.1 +13
- Red Hat Enterprise Linux Desktop Optional (v. 6) emacs-git-1.7.1-4.el6_7.1, emacs-git-el-1.7.1-4.el6_7.1, git-1.7.1-4.el6_7.1 +9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) emacs-git-1.7.1-4.el6_7.1, emacs-git-el-1.7.1-4.el6_7.1, git-1.7.1-4.el6_7.1 +9
- Red Hat Enterprise Linux Server (v. 6) git-1.7.1-4.el6_7.1, perl-Git-1.7.1-4.el6_7.1
- Red Hat Enterprise Linux Server (v. 7) git-1.8.3.1-6.el7_2.1, perl-Git-1.8.3.1-6.el7_2.1
- Red Hat Enterprise Linux Server Optional (v. 6) emacs-git-1.7.1-4.el6_7.1, emacs-git-el-1.7.1-4.el6_7.1, git-all-1.7.1-4.el6_7.1 +7
- Red Hat Enterprise Linux Server Optional (v. 7) emacs-git-1.8.3.1-6.el7_2.1, emacs-git-el-1.8.3.1-6.el7_2.1, git-all-1.8.3.1-6.el7_2.1 +11
- Red Hat Enterprise Linux Workstation (v. 6) git-1.7.1-4.el6_7.1, perl-Git-1.7.1-4.el6_7.1
- Red Hat Enterprise Linux Workstation (v. 7) git-1.8.3.1-6.el7_2.1, perl-Git-1.8.3.1-6.el7_2.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) emacs-git-1.7.1-4.el6_7.1, emacs-git-el-1.7.1-4.el6_7.1, git-all-1.7.1-4.el6_7.1 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) emacs-git-1.8.3.1-6.el7_2.1, emacs-git-el-1.8.3.1-6.el7_2.1, git-all-1.8.3.1-6.el7_2.1 +11
Fixes 2 records
Priority MEDIUM 60
Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.18113 · Published 2016-04-08 · Fixed CWE-119
Priority MEDIUM 59
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.17312 · Published 2016-04-08 · Fixed CWE-119
