Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 522
Alerts This Week
Warning Icon 1 522

Fedora 23: 2015-05b74288af Critical: Git Remote Code Execution

fedora
Calendar Grey November 2, 2015
Dist Fedora Esm H88
Fedora 23 has issued a crucial patch to fix a significant Git security vulnerability that allowed arbitrary code execution via malicious URLs, improving system safety
git-2.1.0-6.fc21 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.4.3-7.fc22 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.5.0...

Summary

Git is a fast, scalable, distributed revision control system with an

unusually rich command set that provides both high-level operations

and full access to internals.

The git rpm installs common set of tools which are usually using with

small amount of dependencies. To install all git packages, including

tools for integrating with other SCMs, install the git-all meta-package.

Update Information:

git-2.1.0-6.fc21 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.4.3-7.fc22 - fix arbitrary code execution via crafted URLs Resolves: #1269797 git-2.5.0-2.fc23 - fix arbitrary code execution via crafted URLs Resolves: #1269797

Topics%20covered

Topics Covered

security advisory fedora remote code execution critical fix git

Change Log

References


[ 1 ] Bug #1269794 - git: arbitrary code execution via crafted URLs https://bugzilla.redhat.com/show_bug.cgi?id=1269794

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update git' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: git
Product: Fedora 23
Version: 2.5.0
Release: 2.fc23
URL: https://git-scm.com/
Summary: Fast Version Control System

Topics%20covered

Topics Covered

security advisory fedora remote code execution critical fix git

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.