Red Hat Security AdvisoryRHSA-2017:2004
git security and bug fix update
Released 2017-08-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) emacs-git-1.8.3.1-11.el7, emacs-git-el-1.8.3.1-11.el7, git-1.8.3.1-11.el7 +13
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) emacs-git-1.8.3.1-11.el7, emacs-git-el-1.8.3.1-11.el7, git-1.8.3.1-11.el7 +13
- Red Hat Enterprise Linux Server (v. 7) git-1.8.3.1-11.el7, perl-Git-1.8.3.1-11.el7
- Red Hat Enterprise Linux Server Optional (v. 7) emacs-git-1.8.3.1-11.el7, emacs-git-el-1.8.3.1-11.el7, git-all-1.8.3.1-11.el7 +11
- Red Hat Enterprise Linux Workstation (v. 7) git-1.8.3.1-11.el7, perl-Git-1.8.3.1-11.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) emacs-git-1.8.3.1-11.el7, emacs-git-el-1.8.3.1-11.el7, git-all-1.8.3.1-11.el7 +11
Fixes 2 records
Priority MEDIUM 52
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.12387 · Published 2017-06-01 · Partial fix
Priority MEDIUM 43
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a malicious repository to cause code execution.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0232 · Published 2017-03-20 · Fixed CWE-116
