Summary
[1.8.3.1-20]
- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
Thanks to Jonathan Nieder <jrnieder@gmail.com> for backporting to 2.1.x
and to Steve Beattie <sbeattie@ubuntu.com> for backporting to 1.9.1
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | emacs-git | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | emacs-git-el | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-all | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-bzr | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-cvs | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-daemon | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-email | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-gnome-keyring | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-gui | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-hg | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-instaweb | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-p4 | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | git-svn | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | gitk | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | gitweb | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | perl-Git | 0:1.8.3.1-20.el7 |
| Oracle Linux · 7 | perl-Git-SVN | 0:1.8.3.1-20.el7 |
Vulnerabilities 1
-
Unscored —
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x b…