Security fix for the ALT Linux 10 package git version 2.17.2-alt1

Sept. 27, 2018 Dmitry V. Levin 2.17.2-alt1 - 2.17.1 - 2.17.2 fixes: CVE-2018-17456...

Regular Expression Denial of Service

Overview Version of is-my-json-valid before 1.4.1 or 2.17.2 are vulnerable to regular expression denial of service ReDoS via the email validation function. Recommendation Update to version 1.4.1, 2.17.2 or later. References - GitHub PR 159 - GitHub Commit b3051b2 - HackerOne Report - GitHub Advis...

CVE-2015-1324

CVE-2015-1324 affects Ubuntu’s Apport before 2.17.2-0ubuntu1.1 (Ubuntu 15.04) and older packages on 14.04/14.10/12.04 releases. The issue arises from incorrect handling of permissions when generating core dumps for setuid binaries, enabling local users to write to arbitrary files and gain root pr...