Advisory ROSA-SA-2023-2130

Software: git 1.8.3.1
OS: rosa-server79

package_evr_string: git-1.8.3.1-23

CVE-ID: CVE-2022-23521
BDU-ID: 2023-00499
CVE-Crit: CRITICAL
CVE-DESC: A vulnerability in the attribute definition mechanism for the gitattributes paths of the Git distributed version control system is related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code using a specially crafted .gitattributes file
CVE-STATUS: Resolved
CVE-REV: To close, run the yum update git command

CVE-ID: CVE-2022-41903
BDU-ID: 2023-00609
CVE-Crit: CRITICAL
CVE-DESC: A vulnerability in the pretty.c::format_and_pad_commit() function of the Git distributed version control system’s commit formatting mechanism is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code
CVE-STATUS: Fixed
CVE-REV: Execute yum update git command to close.