ELSA-2020-0124

Опубликовано: 16 янв. 2020

Источник: oracle-oval

Платформа: Oracle Linux 7

Описание

ELSA-2020-0124: git security update (IMPORTANT)

[1.8.3.1-21]

Fix CVE-2019-1387

Обновленные пакеты

Oracle Linux 7

Oracle Linux aarch64

emacs-git

1.8.3.1-21.el7_7

emacs-git-el

1.8.3.1-21.el7_7

git

1.8.3.1-21.el7_7

git-all

1.8.3.1-21.el7_7

git-bzr

1.8.3.1-21.el7_7

git-cvs

1.8.3.1-21.el7_7

git-daemon

1.8.3.1-21.el7_7

git-email

1.8.3.1-21.el7_7

git-gnome-keyring

1.8.3.1-21.el7_7

git-gui

1.8.3.1-21.el7_7

git-hg

1.8.3.1-21.el7_7

git-instaweb

1.8.3.1-21.el7_7

git-p4

1.8.3.1-21.el7_7

git-svn

1.8.3.1-21.el7_7

gitk

1.8.3.1-21.el7_7

gitweb

1.8.3.1-21.el7_7

perl-Git

1.8.3.1-21.el7_7

perl-Git-SVN

1.8.3.1-21.el7_7

Oracle Linux x86_64

emacs-git

1.8.3.1-21.el7_7

emacs-git-el

1.8.3.1-21.el7_7

git

1.8.3.1-21.el7_7

git-all

1.8.3.1-21.el7_7

git-bzr

1.8.3.1-21.el7_7

git-cvs

1.8.3.1-21.el7_7

git-daemon

1.8.3.1-21.el7_7

git-email

1.8.3.1-21.el7_7

git-gnome-keyring

1.8.3.1-21.el7_7

git-gui

1.8.3.1-21.el7_7

git-hg

1.8.3.1-21.el7_7

git-instaweb

1.8.3.1-21.el7_7

git-p4

1.8.3.1-21.el7_7

git-svn

1.8.3.1-21.el7_7

gitk

1.8.3.1-21.el7_7

gitweb

1.8.3.1-21.el7_7

perl-Git

1.8.3.1-21.el7_7

perl-Git-SVN

1.8.3.1-21.el7_7

Связанные CVE

CVE-2019-1387

Ссылки на источники

Связанные уязвимости

CVE-2019-1387

CVSS3: 8.8

ubuntu

больше 5 лет назад

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones.