Red Hat Security AdvisoryRHSA-2020:3581
git security update
Released 2020-08-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) emacs-git-1.8.3.1-23.el7_7, emacs-git-el-1.8.3.1-23.el7_7, git-1.8.3.1-23.el7_7 +15
- Red Hat Enterprise Linux Server EUS (v. 7.7) git-1.8.3.1-23.el7_7, perl-Git-1.8.3.1-23.el7_7
- Red Hat Enterprise Linux Server Optional EUS (v. 7.7) emacs-git-1.8.3.1-23.el7_7, emacs-git-el-1.8.3.1-23.el7_7, git-all-1.8.3.1-23.el7_7 +13
Fixes 2 records
Priority MEDIUM 56
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.
CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.14887 · Published 2020-04-14 · Fixed in 2.17.4, 2.18.3 +7 CWE-20
Priority LOW 39
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03867 · Published 2020-04-21 · Fixed in 2.17.5, 2.18.4 +7 CWE-20
