Red Hat Security AdvisoryRHSA-2017:2485
git security update
Released 2017-08-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) emacs-git-1.7.1-9.el6_9, emacs-git-el-1.7.1-9.el6_9, git-1.7.1-9.el6_9 +9
- Red Hat Enterprise Linux HPC Node Optional (v. 6) emacs-git-1.7.1-9.el6_9, emacs-git-el-1.7.1-9.el6_9, git-1.7.1-9.el6_9 +9
- Red Hat Enterprise Linux Server (v. 6) git-1.7.1-9.el6_9, perl-Git-1.7.1-9.el6_9
- Red Hat Enterprise Linux Server Optional (v. 6) emacs-git-1.7.1-9.el6_9, emacs-git-el-1.7.1-9.el6_9, git-all-1.7.1-9.el6_9 +7
- Red Hat Enterprise Linux Workstation (v. 6) git-1.7.1-9.el6_9, perl-Git-1.7.1-9.el6_9
- Red Hat Enterprise Linux Workstation Optional (v. 6) emacs-git-1.7.1-9.el6_9, emacs-git-el-1.7.1-9.el6_9, git-all-1.7.1-9.el6_9 +7
Fixes 1 record
Priority HIGH 78
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.77823 · Published 2017-10-04 · Fixed CWE-601
