Red Hat Security AdvisoryRHSA-2020:0002
rh-git218-git security update
Released 2020-01-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-git218-git-2.18.2-1.el7, rh-git218-git-all-2.18.2-1.el7, rh-git218-git-core-2.18.2-1.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-git218-git-2.18.2-1.el7, rh-git218-git-all-2.18.2-1.el7, rh-git218-git-core-2.18.2-1.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-git218-git-2.18.2-1.el7, rh-git218-git-all-2.18.2-1.el7, rh-git218-git-core-2.18.2-1.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-git218-git-2.18.2-1.el7, rh-git218-git-all-2.18.2-1.el7, rh-git218-git-core-2.18.2-1.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-git218-git-2.18.2-1.el7, rh-git218-git-all-2.18.2-1.el7, rh-git218-git-core-2.18.2-1.el7 +13
Fixes 4 records
Priority MEDIUM 63
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.34007 · Published 2020-01-24 · Partial fix CWE-20
Priority MEDIUM 59
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.24014 · Published 2020-01-24 · Fixed CWE-20
Priority MEDIUM 47
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04426 · Published 2019-12-18 · Fixed in v2.24.1, v2.23.1 +9
Priority LOW 16
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00427 · Published 2020-01-24 · Partial fix
THREATIST.IORead the docs