Red Hat Security AdvisoryRHSA-2016:0497
git19-git security update
Released 2016-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) git19-emacs-git-1.9.4-4.el6.1, git19-emacs-git-el-1.9.4-4.el6.1, git19-git-1.9.4-4.el6.1 +10
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) git19-emacs-git-1.9.4-4.el7.1, git19-emacs-git-el-1.9.4-4.el7.1, git19-git-1.9.4-4.el7.1 +12
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) git19-emacs-git-1.9.4-4.el6.1, git19-emacs-git-el-1.9.4-4.el6.1, git19-git-1.9.4-4.el6.1 +10
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) git19-emacs-git-1.9.4-4.el6.1, git19-emacs-git-el-1.9.4-4.el6.1, git19-git-1.9.4-4.el6.1 +10
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) git19-emacs-git-1.9.4-4.el7.1, git19-emacs-git-el-1.9.4-4.el7.1, git19-git-1.9.4-4.el7.1 +12
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) git19-emacs-git-1.9.4-4.el7.1, git19-emacs-git-el-1.9.4-4.el7.1, git19-git-1.9.4-4.el7.1 +12
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) git19-emacs-git-1.9.4-4.el6.1, git19-emacs-git-el-1.9.4-4.el6.1, git19-git-1.9.4-4.el6.1 +10
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) git19-emacs-git-1.9.4-4.el7.1, git19-emacs-git-el-1.9.4-4.el7.1, git19-git-1.9.4-4.el7.1 +12
Fixes 2 records
Priority MEDIUM 60
Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.18113 · Published 2016-04-08 · Fixed CWE-119
Priority MEDIUM 59
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.17312 · Published 2016-04-08 · Fixed CWE-119
