Skip to content
OpenAdvisories
High ELSA-2016-0496 2 CVEs

Important: git security update (Oracle Linux 7)

Published Mar 23, 2016 · Updated Mar 23, 2016

Ecosystem: Oracle Linux

Summary

[1.7.1-4.1]
- fix heap overflow CVE-2016-2315 CVE-2016-2324
Resolves: #1318252

[1.7.1-4]
- fix CVE-2013-0308

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 emacs-git 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 emacs-git-el 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git-all 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git-bzr 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git-cvs 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git-daemon 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git-email 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git-gui 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git-hg 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git-p4 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 git-svn 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 gitk 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 gitweb 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 perl-Git 0:1.8.3.1-6.el7_2.1
Oracle Linux · 7 perl-Git-SVN 0:1.8.3.1-6.el7_2.1

Vulnerabilities 2

  • Unscored —
    CVE-2016-2315 EPSS 17%

    revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary …

    git git Debian Ubuntu
  • Unscored —
    CVE-2016-2324 EPSS 18%

    Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) m…

    git git Debian Ubuntu