Red Hat Security Advisory

RHSA-2020:2337

git security update

Released 2020-05-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client Optional (v. 7) emacs-git-1.8.3.1-23.el7_8, emacs-git-el-1.8.3.1-23.el7_8, git-1.8.3.1-23.el7_8 +15
Red Hat Enterprise Linux ComputeNode Optional (v. 7) emacs-git-1.8.3.1-23.el7_8, emacs-git-el-1.8.3.1-23.el7_8, git-1.8.3.1-23.el7_8 +15
Red Hat Enterprise Linux Server (v. 7) git-1.8.3.1-23.el7_8, perl-Git-1.8.3.1-23.el7_8
Red Hat Enterprise Linux Server Optional (v. 7) emacs-git-1.8.3.1-23.el7_8, emacs-git-el-1.8.3.1-23.el7_8, git-all-1.8.3.1-23.el7_8 +13
Red Hat Enterprise Linux Workstation (v. 7) git-1.8.3.1-23.el7_8, perl-Git-1.8.3.1-23.el7_8
Red Hat Enterprise Linux Workstation Optional (v. 7) emacs-git-1.8.3.1-23.el7_8, emacs-git-el-1.8.3.1-23.el7_8, git-all-1.8.3.1-23.el7_8 +13

TI-2020-08882 CVE-2020-11008

LOW 39

Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03867 Published 2020-04-21 Fixed in 2.17.5, 2.18.4 +7 CWE-20