Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:2969-1

Опубликовано: 02 дек. 2016
Источник: suse-cvrf

Описание

Security update for libgit2

libgit2 was updated to fix two security issues.

These security issues were fixed:

  • CVE-2016-8568: Read out-of-bounds in git_oid_nfmt (bsc#1003810).
  • CVE-2016-8569: DoS caused by a NULL pointer dereference in git_commit_message (bsc#1003810).

Список пакетов

SUSE Linux Enterprise Software Development Kit 12 SP2
libgit2-24-0.24.1-3.1

Ссылки

Описание

The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP2:libgit2-24-0.24.1-3.1
Ссылки

Описание

The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP2:libgit2-24-0.24.1-3.1
Ссылки