Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 573
Alerts This Week
Warning Icon 1 573

Fedora 22: 2015-cf767c77c1 Critical: Git Code Execution Risk

fedora
Calendar Grey November 8, 2015
Dist Fedora Esm H88
Essential patch released for git in Fedora 22, tackling critical vulnerability from specially crafted URLs that could lead to unauthorized code execution. Ensure your system is safe!
git-2.1.0-6.fc21 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.4.3-7.fc22 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.5.0...

Summary

Git is a fast, scalable, distributed revision control system with an

unusually rich command set that provides both high-level operations

and full access to internals.

The git rpm installs the core tools with minimal dependencies. To

install all git packages, including tools for integrating with other

SCMs, install the git-all meta-package.

Update Information:

git-2.1.0-6.fc21 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.4.3-7.fc22 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.5.0-2.fc23 - fix arbitrary code execution via crafted URLs Resolves: #1269797

Topics%20covered

Topics Covered

security advisory update Fedora code execution git

Change Log

References


[ 1 ] Bug #1269794 - git: arbitrary code execution via crafted URLs https://bugzilla.redhat.com/show_bug.cgi?id=1269794

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update git' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: git
Product: Fedora 22
Version: 2.4.3
Release: 7.fc22
URL: https://git-scm.com/
Summary: Fast Version Control System

Topics%20covered

Topics Covered

security advisory update Fedora code execution git

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.