Red Hat Security AdvisoryRHSA-2018:3408
git security update
Released 2018-10-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) emacs-git-1.8.3.1-20.el7, emacs-git-el-1.8.3.1-20.el7, git-1.8.3.1-20.el7 +15
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) emacs-git-1.8.3.1-20.el7, emacs-git-el-1.8.3.1-20.el7, git-1.8.3.1-20.el7 +15
- Red Hat Enterprise Linux Server (v. 7) git-1.8.3.1-20.el7, perl-Git-1.8.3.1-20.el7
- Red Hat Enterprise Linux Server Optional (v. 7) emacs-git-1.8.3.1-20.el7, emacs-git-el-1.8.3.1-20.el7, git-all-1.8.3.1-20.el7 +13
- Red Hat Enterprise Linux Workstation (v. 7) git-1.8.3.1-20.el7, perl-Git-1.8.3.1-20.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) emacs-git-1.8.3.1-20.el7, emacs-git-el-1.8.3.1-20.el7, git-all-1.8.3.1-20.el7 +13
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) git-1.8.3.1-20.el7, perl-Git-1.8.3.1-20.el7
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) emacs-git-1.8.3.1-20.el7, emacs-git-el-1.8.3.1-20.el7, git-all-1.8.3.1-20.el7 +13
Fixes 1 record
Priority CRITICAL 87
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x before 2.19.1 allows remote code execution during processing of a recursive "git clone" of a superproj…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.97356 · Published 2018-10-06 · Partial fix CWE-88