Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-2775

Высокий

ALT-PU-2017-2775: package fossil update to version 2.4-alt1

Источник
errata.altlinux.org
Дата публикации
08.12.2017
Дата обновления
08.12.2017
Устраненные уязвимости
1
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades fossil to version 2.4-alt1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2017-2775https://errata.altlinux.org/ALT-PU-2017-2775

Связанные уязвимости

ubuntu логотип

CVE-2017-17459

CVSS3: 8.8
ubuntu
почти 9 лет назад

http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.

nvd логотип

CVE-2017-17459

CVSS3: 8.8
nvd
почти 9 лет назад

http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.

debian логотип

CVE-2017-17459

CVSS3: 8.8
debian
почти 9 лет назад

http_transport.c in Fossil before 2.4, when the SSH sync protocol is u ...

suse-cvrf логотип

openSUSE-SU-2017:3271-1

suse-cvrf
почти 9 лет назад

Security update for fossil

github логотип

GHSA-ff3p-f5xw-q723

CVSS3: 8.8
github
больше 4 лет назад

http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-14176, CVE-2017-16228, CVE-2017-1000116, and CVE-2017-1000117.