Summary
[2.31.1-3]
- Fixes CVE-2022-23521 and CVE-2022-41903
- Tests: try harder to find open ports for apache, git, and svn
- Resolves: #2162063
Fixed packages 15
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | git | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-all | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-core | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-core-doc | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-credential-libsecret | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-daemon | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-email | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-gui | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-instaweb | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-subtree | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | git-svn | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | gitk | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | gitweb | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | perl-Git | 0:2.31.1-3.el8_7 |
| Oracle Linux · 8 | perl-Git-SVN | 0:2.31.1-3.el8_7 |
Vulnerabilities 2
-
Critical 9.8CVE-2022-23521 EPSS 56%
gitattributes parsing integer overflow in git
Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes tha…
-
Critical 9.8
Integer overflow in `git archive`, `git log --format` leading to RCE in git
Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst` gitattribute. When processing the padding operators, t…