Summary
[2.18.2-1]
- Update to release 2.18.2
- Remote code execution in recursive clones with nested submodules
Resolves: CVE-2019-1387
- Fixes CVE-2019-1348, CVE-2019-1349, CVE-2019-1350, CVE-2019-1351,
CVE-2019-1352, CVE-2019-1353, CVE-2019-1354
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | git | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | git-all | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | git-core | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | git-core-doc | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | git-daemon | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | git-email | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | git-gui | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | git-instaweb | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | git-subtree | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | git-svn | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | gitk | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | gitweb | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | perl-Git | 0:2.18.2-1.el8_1 |
| Oracle Linux · 8 | perl-Git-SVN | 0:2.18.2-1.el8_1 |
Vulnerabilities 4
-
Unscored —
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15…
-
Unscored —CVE-2019-1349 EPSS 34%
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual…
-
Unscored —CVE-2019-1352 EPSS 24%
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual…
-
Unscored —
An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15…