71 matches found
SUSE-SU-2018:1566-2 Security update for git
This update for git fixes several issues. These security issues were fixed: - CVE-2018-11233: Path sanity-checks on NTFS allowed attackers to read arbitrary memory bsc1095218 - CVE-2018-11235: Arbitrary code execution when recursively cloning a malicious repository bsc1095219...
DLA-1533-1 git - security update
Bulletin has no description...
git security update
1.8.3.1-14 - Backport fix for CVE-2018-1123 - Thanks to Jonathan Nieder for backporting to 2.1.x and to Steve Beattie for backporting to 1.9.1...
DSA-4212-1 git - security update
Bulletin has no description...
Debian DLA-1068-1 : git security update
Joern Schneeweisz discovered that git, a distributed revision control system, did not correctly handle maliciously constructed ssh:// URLs. This allowed an attacker to run an arbitrary shell command, for instance via git submodules. For Debian 7 'Wheezy', these problems have been fixed in version...
git security update
1.7.1-9 - prevent command injection via malicious ssh URLs Resolves: CVE-2017-1000117...
openSUSE Security Update : git (openSUSE-2017-624)
This update for git fixes the following issues : - git 2.12.3 : - CVE-2017-8386: Fix git-shell not to escape with the starting dash name bsc1038395 - Fix for potential segv introduced in v2.11.0 and later - Misc fixes and cleanups. - git 2.12.2 : - CLI output fixes - 'Dump http' transport fixes -...
SUSE-SU-2017:1357-1 Security update for git
This update for git fixes the following issues: - git 2.12.3: CVE-2017-8386: Fix git-shell not to escape with the starting dash name bsc1038395 Fix for potential segv introduced in v2.11.0 and later Misc fixes and cleanups. - git 2.12.2: CLI output fixes 'Dump http' transport fixes various fixes...
[SECURITY] [DLA 938-1] git security update
Package : git Version : 1:1.7.10.4-1+wheezy4 CVE ID : CVE-2017-8386 Timo Schmid of ERNW GmbH discovered that the Git git-shell, a restricted login shell for Git-only SSH access, allows a user to run an interactive pager by causing it to spawn "git upload-pack --help". For Debian 7 "Wheezy", these...
Important: git
Issue Overview: An integer truncation flaw CVE-2016-2315 and an integer overflow flaw CVE-2016-2324, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git...
SUSE-SU-2016:0796-1 Security update for git
This update for git fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code CVE-2016-2315, CVE-2016-2324, bsc971328...