Skip to content
OpenAdvisories
High ELSA-2017-2484 1 CVE

Important: git security update (Oracle Linux 7)

Published Aug 16, 2017 · Updated Aug 16, 2017

Ecosystem: Oracle Linux

Summary

[1.8.3.1-12]
- prevent command injection via malicious ssh URLs
Resolves: CVE-2017-1000117

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 emacs-git 0:1.8.3.1-12.el7_4
Oracle Linux · 7 emacs-git-el 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git-all 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git-bzr 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git-cvs 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git-daemon 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git-email 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git-gui 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git-hg 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git-p4 0:1.8.3.1-12.el7_4
Oracle Linux · 7 git-svn 0:1.8.3.1-12.el7_4
Oracle Linux · 7 gitk 0:1.8.3.1-12.el7_4
Oracle Linux · 7 gitweb 0:1.8.3.1-12.el7_4
Oracle Linux · 7 perl-Git 0:1.8.3.1-12.el7_4
Oracle Linux · 7 perl-Git-SVN 0:1.8.3.1-12.el7_4

Vulnerabilities 1

  • Unscored —
    CVE-2017-1000117 Public exploit EPSS 78%

    A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL c…

    git git git Debian Ubuntu Alpine