Red Hat Security Advisory

RHSA-2020:1511

git security update

Released 2020-04-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) emacs-git-1.8.3.1-22.el7_8, emacs-git-el-1.8.3.1-22.el7_8, git-1.8.3.1-22.el7_8 +15
Red Hat Enterprise Linux ComputeNode Optional (v. 7) emacs-git-1.8.3.1-22.el7_8, emacs-git-el-1.8.3.1-22.el7_8, git-1.8.3.1-22.el7_8 +15
Red Hat Enterprise Linux Server (v. 7) git-1.8.3.1-22.el7_8, perl-Git-1.8.3.1-22.el7_8
Red Hat Enterprise Linux Server Optional (v. 7) emacs-git-1.8.3.1-22.el7_8, emacs-git-el-1.8.3.1-22.el7_8, git-all-1.8.3.1-22.el7_8 +13
Red Hat Enterprise Linux Workstation (v. 7) git-1.8.3.1-22.el7_8, perl-Git-1.8.3.1-22.el7_8
Red Hat Enterprise Linux Workstation Optional (v. 7) emacs-git-1.8.3.1-22.el7_8, emacs-git-el-1.8.3.1-22.el7_8, git-all-1.8.3.1-22.el7_8 +13

TI-2020-04316 CVE-2020-5260

MEDIUM 56

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.14887 Published 2020-04-14 Fixed in 2.17.4, 2.18.3 +7 CWE-20