Red Hat Security AdvisoryRHSA-2018:2147
rh-git29-git security update
Released 2018-07-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) rh-git29-emacs-git-2.9.3-4.el6, rh-git29-emacs-git-el-2.9.3-4.el6, rh-git29-git-2.9.3-4.el6 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-git29-git-2.9.3-4.el7, rh-git29-git-all-2.9.3-4.el7, rh-git29-git-core-2.9.3-4.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) rh-git29-emacs-git-2.9.3-4.el6, rh-git29-emacs-git-el-2.9.3-4.el6, rh-git29-git-2.9.3-4.el6 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.3) rh-git29-git-2.9.3-4.el7, rh-git29-git-all-2.9.3-4.el7, rh-git29-git-core-2.9.3-4.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) rh-git29-git-2.9.3-4.el7, rh-git29-git-all-2.9.3-4.el7, rh-git29-git-core-2.9.3-4.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-git29-git-2.9.3-4.el7, rh-git29-git-all-2.9.3-4.el7, rh-git29-git-core-2.9.3-4.el7 +11
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) rh-git29-emacs-git-2.9.3-4.el6, rh-git29-emacs-git-el-2.9.3-4.el6, rh-git29-git-2.9.3-4.el6 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-git29-git-2.9.3-4.el7, rh-git29-git-all-2.9.3-4.el7, rh-git29-git-core-2.9.3-4.el7 +11
Fixes 2 records
Priority MEDIUM 64
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote code execution can occur.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.48062 · Published 2018-05-30 · Partial fix CWE-22
Priority MEDIUM 40
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.04408 · Published 2018-05-30 · Partial fix CWE-125
