Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Fedora 22: FEDORA-2015-9324 Critical: FusionForge Command Execution

fedora
Calendar Grey June 10, 2015
Scroller Fedora
The latest security patch for Fedora 22 addresses a significant vulnerability in FusionForge. This flaw, allowing for unauthorized command execution, was identified by expert Ansgar Burchardt.
Security fix for CVE-2015-0850 CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories

Summary

FusionForge provides many tools to aid collaboration in a

development project, such as bug-tracking, task management,

mailing-lists, SCM repository, forums, support request helper,

web/FTP hosting, release management, etc. All these services are

integrated into one web site and managed through a web interface.

This metapackage installs a stand-alone FusionForge site.

Update Information:

Security fix for CVE-2015-0850 CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt .

Topics%20covered

Topics Covered

security advisory fedora critical command execution fusionforge

Change Log

* Thu May 28 2015 Sylvain Beucler - 5.3.2-4 - CVE-2015-0850: Prevent arbitrary command execution via clone URL parameter of the method to create secondary Git repositories. Found by Ansgar Burchardt .

References


[ 1 ] Bug #1226872 - CVE-2015-0850 fusionforge: incorrect input validation in Git plug-in https://bugzilla.redhat.com/show_bug.cgi?id=1226872

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update fusionforge' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: fusionforge
Product: Fedora 22
Version: 5.3.2
Release: 4.fc22
URL: Summary : Collaborative development tool

Topics%20covered

Topics Covered

security advisory fedora critical command execution fusionforge

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.