Red Hat Security AdvisoryRHSA-2017:2491
rh-git29-git security update
Released 2017-08-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-git29-emacs-git-2.9.3-3.el6, rh-git29-emacs-git-el-2.9.3-3.el6, rh-git29-git-2.9.3-3.el6 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-git29-git-2.9.3-3.el7, rh-git29-git-all-2.9.3-3.el7, rh-git29-git-core-2.9.3-3.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-git29-emacs-git-2.9.3-3.el6, rh-git29-emacs-git-el-2.9.3-3.el6, rh-git29-git-2.9.3-3.el6 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-git29-git-2.9.3-3.el7, rh-git29-git-all-2.9.3-3.el7, rh-git29-git-core-2.9.3-3.el7 +11
Fixes 2 records
Priority HIGH 78
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.77823 · Published 2017-10-04 · Fixed CWE-601
Priority MEDIUM 52
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x before 2.10.3, 2.11.x before 2.11.2, and 2.12.x before 2.12.3 might allow remote…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.12387 · Published 2017-06-01 · Partial fix
