Red Hat Security AdvisoryRHSA-2017:2484
git security update
Released 2017-08-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) emacs-git-1.8.3.1-12.el7_4, emacs-git-el-1.8.3.1-12.el7_4, git-1.8.3.1-12.el7_4 +13
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) emacs-git-1.8.3.1-12.el7_4, emacs-git-el-1.8.3.1-12.el7_4, git-1.8.3.1-12.el7_4 +13
- Red Hat Enterprise Linux Server (v. 7) git-1.8.3.1-12.el7_4, perl-Git-1.8.3.1-12.el7_4
- Red Hat Enterprise Linux Server Optional (v. 7) emacs-git-1.8.3.1-12.el7_4, emacs-git-el-1.8.3.1-12.el7_4, git-all-1.8.3.1-12.el7_4 +11
- Red Hat Enterprise Linux Workstation (v. 7) git-1.8.3.1-12.el7_4, perl-Git-1.8.3.1-12.el7_4
- Red Hat Enterprise Linux Workstation Optional (v. 7) emacs-git-1.8.3.1-12.el7_4, emacs-git-el-1.8.3.1-12.el7_4, git-all-1.8.3.1-12.el7_4 +11
Fixes 1 record
Priority HIGH 78
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.77823 · Published 2017-10-04 · Fixed CWE-601
