Summary
[1.8.3.1-11]
- dissalow repo names beginning with dash
Resolves: CVE-2017-8386
[-1.8.3.1-10]
- do not put unsanitized branch names in
Resolves: CVE-2014-9938
[-1.8.3.1-9]
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
authentication
Resolves: #1369173
[1.8.3.1-8]
- remove needles check of xmalloc from previous patch
Resolves: #1318255
[1.8.3.1-7]
- fix heap overflow CVE-2016-2315 CVE-2016-2324
Resolves: #1318255
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | emacs-git | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | emacs-git-el | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git-all | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git-bzr | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git-cvs | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git-daemon | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git-email | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git-gui | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git-hg | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git-p4 | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | git-svn | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | gitk | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | gitweb | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | perl-Git | 0:1.8.3.1-11.el7 |
| Oracle Linux · 7 | perl-Git-SVN | 0:1.8.3.1-11.el7 |
Vulnerabilities 2
-
Unscored —
contrib/completion/git-prompt.sh in Git before 1.9.3 does not sanitize branch names in the PS1 variable, allowing a mal…
-
Unscored —
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x b…