Skip to content
OpenAdvisories
Medium ELSA-2015-2561 1 CVE

Moderate: git security update (Oracle Linux 7)

Published Dec 8, 2015 · Updated Dec 8, 2015

Summary

[1.8.3.1-6]
- fix arbitrary code execution via crafted URLs
Resolves: #1274737

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 emacs-git 0:1.8.3.1-6.el7
Oracle Linux · 7 emacs-git-el 0:1.8.3.1-6.el7
Oracle Linux · 7 git 0:1.8.3.1-6.el7
Oracle Linux · 7 git-all 0:1.8.3.1-6.el7
Oracle Linux · 7 git-bzr 0:1.8.3.1-6.el7
Oracle Linux · 7 git-cvs 0:1.8.3.1-6.el7
Oracle Linux · 7 git-daemon 0:1.8.3.1-6.el7
Oracle Linux · 7 git-email 0:1.8.3.1-6.el7
Oracle Linux · 7 git-gui 0:1.8.3.1-6.el7
Oracle Linux · 7 git-hg 0:1.8.3.1-6.el7
Oracle Linux · 7 git-p4 0:1.8.3.1-6.el7
Oracle Linux · 7 git-svn 0:1.8.3.1-6.el7
Oracle Linux · 7 gitk 0:1.8.3.1-6.el7
Oracle Linux · 7 gitweb 0:1.8.3.1-6.el7
Oracle Linux · 7 perl-Git 0:1.8.3.1-6.el7
Oracle Linux · 7 perl-Git-SVN 0:1.8.3.1-6.el7

Vulnerabilities 1

  • Unscored —
    CVE-2015-7545 Public exploit EPSS 19%

    The (1) git-remote-ext and (2) unspecified other remote helper programs in Git before 2.3.10, 2.4.x before 2.4.10, 2.5.…