Skip to content
OpenAdvisories
High ELSA-2023-0978 2 CVEs

Important: git security update (Oracle Linux 7)

Published Feb 28, 2023 · Updated Feb 28, 2023

Summary

[1.8.3.1-24]
- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 7 emacs-git 0:1.8.3.1-24.el7_9
Oracle Linux · 7 emacs-git-el 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-all 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-bzr 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-cvs 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-daemon 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-email 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-gnome-keyring 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-gui 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-hg 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-instaweb 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-p4 0:1.8.3.1-24.el7_9
Oracle Linux · 7 git-svn 0:1.8.3.1-24.el7_9
Oracle Linux · 7 gitk 0:1.8.3.1-24.el7_9
Oracle Linux · 7 gitweb 0:1.8.3.1-24.el7_9
Oracle Linux · 7 perl-Git 0:1.8.3.1-24.el7_9
Oracle Linux · 7 perl-Git-SVN 0:1.8.3.1-24.el7_9

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-23521 EPSS 56%

    gitattributes parsing integer overflow in git

    Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes tha…

  • Critical 9.8
    CVE-2022-41903 Public exploit EPSS 44%

    Integer overflow in `git archive`, `git log --format` leading to RCE in git

    Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst` gitattribute. When processing the padding operators, t…