Summary
[1.8.3.1-22 ]
- Crafted URL containing new lines can cause credential leak
- Resolves: CVE-2020-5260
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | emacs-git | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | emacs-git-el | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-all | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-bzr | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-cvs | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-daemon | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-email | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-gnome-keyring | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-gui | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-hg | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-instaweb | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-p4 | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | git-svn | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | gitk | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | gitweb | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | perl-Git | 0:1.8.3.1-22.el7_8 |
| Oracle Linux · 7 | perl-Git-SVN | 0:1.8.3.1-22.el7_8 |
Vulnerabilities 1
-
Critical 9.3
malicious URLs may cause Git to present stored credentials to the wrong server
Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external "credential helper" programs to store and retrieve passwords or other credentials from secure stor…