Red Hat Security AdvisoryRHSA-2020:1975
rh-git218-git security update
Released 2020-04-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) rh-git218-git-2.18.4-1.el7, rh-git218-git-all-2.18.4-1.el7, rh-git218-git-core-2.18.4-1.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) rh-git218-git-2.18.4-1.el7, rh-git218-git-all-2.18.4-1.el7, rh-git218-git-core-2.18.4-1.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) rh-git218-git-2.18.4-1.el7, rh-git218-git-all-2.18.4-1.el7, rh-git218-git-core-2.18.4-1.el7 +13
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) rh-git218-git-2.18.4-1.el7, rh-git218-git-all-2.18.4-1.el7, rh-git218-git-core-2.18.4-1.el7 +13
Fixes 1 record
Priority LOW 39
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03867 · Published 2020-04-21 · Fixed in 2.17.5, 2.18.4 +7 CWE-20
