Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2015:2325-1

Опубликовано: 19 дек. 2015
Источник: suse-cvrf

Описание

Recommended update for git

The git package was updated to fix the following security issue:

  • CVE-2015-7545: Fix remote code execution with recursive fetch of submodules (bsc#948969).

Список пакетов

SUSE Linux Enterprise Server 12 SP1
git-core-1.8.5.6-15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
git-core-1.8.5.6-15.1
SUSE Linux Enterprise Software Development Kit 12 SP1
git-1.8.5.6-15.1
git-arch-1.8.5.6-15.1
git-core-1.8.5.6-15.1
git-cvs-1.8.5.6-15.1
git-daemon-1.8.5.6-15.1
git-email-1.8.5.6-15.1
git-gui-1.8.5.6-15.1
git-svn-1.8.5.6-15.1
git-web-1.8.5.6-15.1
gitk-1.8.5.6-15.1

Ссылки

Описание

The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 do not properly restrict the allowed protocols, which might allow remote attackers to execute arbitrary code via a URL in a (a) .gitmodules file or (b) unknown other sources in a submodule.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP1:git-core-1.8.5.6-15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:git-core-1.8.5.6-15.1
SUSE Linux Enterprise Software Development Kit 12 SP1:git-1.8.5.6-15.1
SUSE Linux Enterprise Software Development Kit 12 SP1:git-arch-1.8.5.6-15.1
Ссылки
Уязвимость SUSE-SU-2015:2325-1