Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 10: Fix for Critical Git-Daemon Denial of Service Vulnerability

fedora
Calendar Grey June 24, 2009
Dist Fedora Esm H88
This release resolves a significant Denial of Service vulnerability in git-daemon, in addition to minor improvements for Fedora 10 users.
This update fixes a Denial of Service vulnerability in git-daemon

Summary

Git is a fast, scalable, distributed revision control system with an

unusually rich command set that provides both high-level operations

and full access to internals.

The git rpm installs the core tools with minimal dependencies. To

install all git packages, including tools for integrating with other

SCMs, install the git-all meta-package.

Update Information:

This update fixes a Denial of Service vulnerability in git-daemon. It also fixes minor issues when using git-cvsimport and the formatting of the git-daemon xinetd service description.

Topics%20covered

Topics Covered

security advisory update critical Fedora Denial of Service git

Change Log

* Fri Jun 19 2009 Todd Zullinger - 1.6.0.6-4 - Fix git-daemon hang on invalid input (CVE-2009-2108, bug 505761) - Ignore Branches output from cvsps-2.2b1 (bug 490602) - Escape newline in git-daemon xinetd description (bug 502393) * Mon Mar 2 2009 Todd Zullinger - 1.6.0.6-3 - Enable parallel delta searching when packing objects (Roland McGrath) - Consolidate build/install options in %make_git (Roland McGrath) - Require perl(Authen::SASL) in git-email (bug 483062) - Exclude vc-git.el from emacs-git (bug 479531) - Change /var/lib/git-daemon to /var/lib/git - Include docs in the git-daemon package - Drop redundant libcurl Requires - Update URL field * Sat Dec 20 2008 Todd Zullinger 1.6.0.6-1 - git-1.6.0.6 - Fixes a local privilege escalation bug in gitweb () - Add gitk Requires to git-gui (bug 476308) * Thu Dec 11 2008 Josh Boyer 1.6.0.5-1 - git-1.6.0.5 * Mon Nov 17 2008 Seth Vidal - switch from /srv/git to /var/lib/git-daemon for packaging rules compliance * Fri Nov 14 2008 Josh Boyer 1.6.0.4-1 - git-1.6.0.4

References


[ 1 ] Bug #505761 - CVE-2009-2108 git daemon Denial of Service with unknown "extra arg" information https://bugzilla.redhat.com/show_bug.cgi?id=505761 [ 2 ] Bug #502393 - git-daemon's description is an incomplete sentence https://bugzilla.redhat.com/show_bug.cgi?id=502393 [ 3 ] Bug #490602 - git-cvsimport got noisy https://bugzilla.redhat.com/show_bug.cgi?id=490602

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update git' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: git
Product: Fedora 10
Version: 1.6.0.6
Release: 4.fc10
URL: https://git-scm.com/
Summary: Core git tools

Topics%20covered

Topics Covered

security advisory update critical Fedora Denial of Service git

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here