Red Hat Security AdvisoryRHSA-2020:1503
rh-git218-git security update
Released 2020-04-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-git218-git-2.18.2-3.el7, rh-git218-git-all-2.18.2-3.el7, rh-git218-git-core-2.18.2-3.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) rh-git218-git-2.18.2-3.el7, rh-git218-git-all-2.18.2-3.el7, rh-git218-git-core-2.18.2-3.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-git218-git-2.18.2-3.el7, rh-git218-git-all-2.18.2-3.el7, rh-git218-git-core-2.18.2-3.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-git218-git-2.18.2-3.el7, rh-git218-git-all-2.18.2-3.el7, rh-git218-git-core-2.18.2-3.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-git218-git-2.18.2-3.el7, rh-git218-git-all-2.18.2-3.el7, rh-git218-git-core-2.18.2-3.el7 +13
Fixes 1 record
Priority MEDIUM 56
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.14887 · Published 2020-04-14 · Fixed in 2.17.4, 2.18.3 +7 CWE-20
