Updated git19-git packages that fix two security issues are now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

====================================================================                   Red Hat Security Advisory

Synopsis:          Important: git19-git security update
Advisory ID:       RHSA-2016:0497-01
Product:           Red Hat Software Collections
Advisory URL:      https://access.redhat.com/errata/RHSA-2016:0497.html
Issue date:        2016-03-23
CVE Names:         CVE-2016-2315 CVE-2016-2324 
====================================================================
1. Summary:

Updated git19-git packages that fix two security issues are now available
for Red Hat Software Collections.

Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) - noarch, x86_64
Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64

3. Description:

Git is a distributed revision control system with a decentralized
architecture. As opposed to centralized version control systems with a
client-server model, Git ensures that each working copy of a Git repository
is an exact copy with complete revision history. This not only allows the
user to work on and contribute to projects without the need to have
permission to push the changes to their official repositories, but also
makes it possible for the user to work with no network connection.

An integer truncation flaw and an integer overflow flaw, both leading to a
heap-based buffer overflow, were found in the way Git processed certain
path information. A remote attacker could create a specially crafted Git
repository that would cause a Git client or server to crash or, possibly,
execute arbitrary code. (CVE-2016-2315, CVE-2016-2324)

All git19-git users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.

4. Solution:

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

5. Bugs fixed (https://bugzilla.redhat.com/):

1317981 - CVE-2016-2315 CVE-2016-2324 git: path_name() integer truncation and overflow leading to buffer overflow

6. Package List:

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6):

Source:
git19-git-1.9.4-4.el6.1.src.rpm

noarch:
git19-emacs-git-1.9.4-4.el6.1.noarch.rpm
git19-emacs-git-el-1.9.4-4.el6.1.noarch.rpm
git19-git-all-1.9.4-4.el6.1.noarch.rpm
git19-git-cvs-1.9.4-4.el6.1.noarch.rpm
git19-git-email-1.9.4-4.el6.1.noarch.rpm
git19-git-gui-1.9.4-4.el6.1.noarch.rpm
git19-gitk-1.9.4-4.el6.1.noarch.rpm
git19-gitweb-1.9.4-4.el6.1.noarch.rpm
git19-perl-Git-1.9.4-4.el6.1.noarch.rpm
git19-perl-Git-SVN-1.9.4-4.el6.1.noarch.rpm

x86_64:
git19-git-1.9.4-4.el6.1.x86_64.rpm
git19-git-daemon-1.9.4-4.el6.1.x86_64.rpm
git19-git-debuginfo-1.9.4-4.el6.1.x86_64.rpm
git19-git-svn-1.9.4-4.el6.1.x86_64.rpm

Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6):

Source:
git19-git-1.9.4-4.el6.1.src.rpm

noarch:
git19-emacs-git-1.9.4-4.el6.1.noarch.rpm
git19-emacs-git-el-1.9.4-4.el6.1.noarch.rpm
git19-git-all-1.9.4-4.el6.1.noarch.rpm
git19-git-cvs-1.9.4-4.el6.1.noarch.rpm
git19-git-email-1.9.4-4.el6.1.noarch.rpm
git19-git-gui-1.9.4-4.el6.1.noarch.rpm
git19-gitk-1.9.4-4.el6.1.noarch.rpm
git19-gitweb-1.9.4-4.el6.1.noarch.rpm
git19-perl-Git-1.9.4-4.el6.1.noarch.rpm
git19-perl-Git-SVN-1.9.4-4.el6.1.noarch.rpm

x86_64:
git19-git-1.9.4-4.el6.1.x86_64.rpm
git19-git-daemon-1.9.4-4.el6.1.x86_64.rpm
git19-git-debuginfo-1.9.4-4.el6.1.x86_64.rpm
git19-git-svn-1.9.4-4.el6.1.x86_64.rpm

Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7):

Source:
git19-git-1.9.4-4.el6.1.src.rpm

noarch:
git19-emacs-git-1.9.4-4.el6.1.noarch.rpm
git19-emacs-git-el-1.9.4-4.el6.1.noarch.rpm
git19-git-all-1.9.4-4.el6.1.noarch.rpm
git19-git-cvs-1.9.4-4.el6.1.noarch.rpm
git19-git-email-1.9.4-4.el6.1.noarch.rpm
git19-git-gui-1.9.4-4.el6.1.noarch.rpm
git19-gitk-1.9.4-4.el6.1.noarch.rpm
git19-gitweb-1.9.4-4.el6.1.noarch.rpm
git19-perl-Git-1.9.4-4.el6.1.noarch.rpm
git19-perl-Git-SVN-1.9.4-4.el6.1.noarch.rpm

x86_64:
git19-git-1.9.4-4.el6.1.x86_64.rpm
git19-git-daemon-1.9.4-4.el6.1.x86_64.rpm
git19-git-debuginfo-1.9.4-4.el6.1.x86_64.rpm
git19-git-svn-1.9.4-4.el6.1.x86_64.rpm

Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6):

Source:
git19-git-1.9.4-4.el6.1.src.rpm

noarch:
git19-emacs-git-1.9.4-4.el6.1.noarch.rpm
git19-emacs-git-el-1.9.4-4.el6.1.noarch.rpm
git19-git-all-1.9.4-4.el6.1.noarch.rpm
git19-git-cvs-1.9.4-4.el6.1.noarch.rpm
git19-git-email-1.9.4-4.el6.1.noarch.rpm
git19-git-gui-1.9.4-4.el6.1.noarch.rpm
git19-gitk-1.9.4-4.el6.1.noarch.rpm
git19-gitweb-1.9.4-4.el6.1.noarch.rpm
git19-perl-Git-1.9.4-4.el6.1.noarch.rpm
git19-perl-Git-SVN-1.9.4-4.el6.1.noarch.rpm

x86_64:
git19-git-1.9.4-4.el6.1.x86_64.rpm
git19-git-daemon-1.9.4-4.el6.1.x86_64.rpm
git19-git-debuginfo-1.9.4-4.el6.1.x86_64.rpm
git19-git-svn-1.9.4-4.el6.1.x86_64.rpm

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7):

Source:
git19-git-1.9.4-4.el7.1.src.rpm

noarch:
git19-emacs-git-1.9.4-4.el7.1.noarch.rpm
git19-emacs-git-el-1.9.4-4.el7.1.noarch.rpm
git19-git-all-1.9.4-4.el7.1.noarch.rpm
git19-git-bzr-1.9.4-4.el7.1.noarch.rpm
git19-git-cvs-1.9.4-4.el7.1.noarch.rpm
git19-git-email-1.9.4-4.el7.1.noarch.rpm
git19-git-gui-1.9.4-4.el7.1.noarch.rpm
git19-git-hg-1.9.4-4.el7.1.noarch.rpm
git19-gitk-1.9.4-4.el7.1.noarch.rpm
git19-gitweb-1.9.4-4.el7.1.noarch.rpm
git19-perl-Git-1.9.4-4.el7.1.noarch.rpm
git19-perl-Git-SVN-1.9.4-4.el7.1.noarch.rpm

x86_64:
git19-git-1.9.4-4.el7.1.x86_64.rpm
git19-git-daemon-1.9.4-4.el7.1.x86_64.rpm
git19-git-debuginfo-1.9.4-4.el7.1.x86_64.rpm
git19-git-svn-1.9.4-4.el7.1.x86_64.rpm

Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1):

Source:
git19-git-1.9.4-4.el7.1.src.rpm

noarch:
git19-emacs-git-1.9.4-4.el7.1.noarch.rpm
git19-emacs-git-el-1.9.4-4.el7.1.noarch.rpm
git19-git-all-1.9.4-4.el7.1.noarch.rpm
git19-git-bzr-1.9.4-4.el7.1.noarch.rpm
git19-git-cvs-1.9.4-4.el7.1.noarch.rpm
git19-git-email-1.9.4-4.el7.1.noarch.rpm
git19-git-gui-1.9.4-4.el7.1.noarch.rpm
git19-git-hg-1.9.4-4.el7.1.noarch.rpm
git19-gitk-1.9.4-4.el7.1.noarch.rpm
git19-gitweb-1.9.4-4.el7.1.noarch.rpm
git19-perl-Git-1.9.4-4.el7.1.noarch.rpm
git19-perl-Git-SVN-1.9.4-4.el7.1.noarch.rpm

x86_64:
git19-git-1.9.4-4.el7.1.x86_64.rpm
git19-git-daemon-1.9.4-4.el7.1.x86_64.rpm
git19-git-debuginfo-1.9.4-4.el7.1.x86_64.rpm
git19-git-svn-1.9.4-4.el7.1.x86_64.rpm

Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2):

Source:
git19-git-1.9.4-4.el7.1.src.rpm

noarch:
git19-emacs-git-1.9.4-4.el7.1.noarch.rpm
git19-emacs-git-el-1.9.4-4.el7.1.noarch.rpm
git19-git-all-1.9.4-4.el7.1.noarch.rpm
git19-git-bzr-1.9.4-4.el7.1.noarch.rpm
git19-git-cvs-1.9.4-4.el7.1.noarch.rpm
git19-git-email-1.9.4-4.el7.1.noarch.rpm
git19-git-gui-1.9.4-4.el7.1.noarch.rpm
git19-git-hg-1.9.4-4.el7.1.noarch.rpm
git19-gitk-1.9.4-4.el7.1.noarch.rpm
git19-gitweb-1.9.4-4.el7.1.noarch.rpm
git19-perl-Git-1.9.4-4.el7.1.noarch.rpm
git19-perl-Git-SVN-1.9.4-4.el7.1.noarch.rpm

x86_64:
git19-git-1.9.4-4.el7.1.x86_64.rpm
git19-git-daemon-1.9.4-4.el7.1.x86_64.rpm
git19-git-debuginfo-1.9.4-4.el7.1.x86_64.rpm
git19-git-svn-1.9.4-4.el7.1.x86_64.rpm

Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7):

Source:
git19-git-1.9.4-4.el7.1.src.rpm

noarch:
git19-emacs-git-1.9.4-4.el7.1.noarch.rpm
git19-emacs-git-el-1.9.4-4.el7.1.noarch.rpm
git19-git-all-1.9.4-4.el7.1.noarch.rpm
git19-git-bzr-1.9.4-4.el7.1.noarch.rpm
git19-git-cvs-1.9.4-4.el7.1.noarch.rpm
git19-git-email-1.9.4-4.el7.1.noarch.rpm
git19-git-gui-1.9.4-4.el7.1.noarch.rpm
git19-git-hg-1.9.4-4.el7.1.noarch.rpm
git19-gitk-1.9.4-4.el7.1.noarch.rpm
git19-gitweb-1.9.4-4.el7.1.noarch.rpm
git19-perl-Git-1.9.4-4.el7.1.noarch.rpm
git19-perl-Git-SVN-1.9.4-4.el7.1.noarch.rpm

x86_64:
git19-git-1.9.4-4.el7.1.x86_64.rpm
git19-git-daemon-1.9.4-4.el7.1.x86_64.rpm
git19-git-debuginfo-1.9.4-4.el7.1.x86_64.rpm
git19-git-svn-1.9.4-4.el7.1.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key

7. References:

https://access.redhat.com/security/cve/CVE-2016-2315
https://access.redhat.com/security/cve/CVE-2016-2324
https://access.redhat.com/security/updates/classification#important
https://access.redhat.com/articles/2201201

8. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact

Copyright 2016 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iD8DBQFW8pv2XlSAg2UNWIIRAqx7AKCHOcL55wy+VDuDZfPNI4hQQ9bMGgCePReW
3h4K5ltEsZcxOP8KAk4kJtA=X5Qz
-----END PGP SIGNATURE-----

-- 
Enterprise-watch-list mailing list
This email address is being protected from spambots. You need JavaScript enabled to view it.

Critical Alert: Buffer Overflow Vulnerability in git19 - RHSA-2016-0497

red hat

March 23, 2016

Updated git19-git packages that fix two security issues are now available for Red Hat Software Collections

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Summary

Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.
An integer truncation flaw and an integer overflow flaw, both leading to a heap-based buffer overflow, were found in the way Git processed certain path information. A remote attacker could create a specially crafted Git repository that would cause a Git client or server to crash or, possibly, execute arbitrary code. (CVE-2016-2315, CVE-2016-2324)
All git19-git users are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

Topics Covered

security advisory Red Hat buffer overflow software update important git Git fixes

References

https://access.redhat.com/security/cve/CVE-2016-2315 https://access.redhat.com/security/cve/CVE-2016-2324 https://access.redhat.com/security/updates/classification#important https://access.redhat.com/articles/2201201

Package List

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6):
Source: git19-git-1.9.4-4.el6.1.src.rpm
noarch: git19-emacs-git-1.9.4-4.el6.1.noarch.rpm git19-emacs-git-el-1.9.4-4.el6.1.noarch.rpm git19-git-all-1.9.4-4.el6.1.noarch.rpm git19-git-cvs-1.9.4-4.el6.1.noarch.rpm git19-git-email-1.9.4-4.el6.1.noarch.rpm git19-git-gui-1.9.4-4.el6.1.noarch.rpm git19-gitk-1.9.4-4.el6.1.noarch.rpm git19-gitweb-1.9.4-4.el6.1.noarch.rpm git19-perl-Git-1.9.4-4.el6.1.noarch.rpm git19-perl-Git-SVN-1.9.4-4.el6.1.noarch.rpm
x86_64: git19-git-1.9.4-4.el6.1.x86_64.rpm git19-git-daemon-1.9.4-4.el6.1.x86_64.rpm git19-git-debuginfo-1.9.4-4.el6.1.x86_64.rpm git19-git-svn-1.9.4-4.el6.1.x86_64.rpm
Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6):
Source: git19-git-1.9.4-4.el6.1.src.rpm
noarch: git19-emacs-git-1.9.4-4.el6.1.noarch.rpm git19-emacs-git-el-1.9.4-4.el6.1.noarch.rpm git19-git-all-1.9.4-4.el6.1.noarch.rpm git19-git-cvs-1.9.4-4.el6.1.noarch.rpm git19-git-email-1.9.4-4.el6.1.noarch.rpm git19-git-gui-1.9.4-4.el6.1.noarch.rpm git19-gitk-1.9.4-4.el6.1.noarch.rpm git19-gitweb-1.9.4-4.el6.1.noarch.rpm git19-perl-Git-1.9.4-4.el6.1.noarch.rpm git19-perl-Git-SVN-1.9.4-4.el6.1.noarch.rpm
x86_64: git19-git-1.9.4-4.el6.1.x86_64.rpm

Read the Full Advisory

Severity

important

Lowest

Low

Medium

High

Critical

Advisory ID: RHSA-2016:0497-01

Product: Red Hat Software Collections

Advisory URL: https://access.redhat.com/errata/RHSA-2016:0497.html

Issue date: 2016-03-23

Topic

Updated git19-git packages that fix two security issues are now availablefor Red Hat Software Collections.Red Hat Product Security has rated this update as having Important securityimpact. Common Vulnerability Scoring System (CVSS) base scores, which givedetailed severity ratings, are available for each vulnerability from theCVE links in the References section.

Topics Covered

security advisory Red Hat buffer overflow software update important git Git fixes

Relevant Releases Architectures

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) - noarch, x86_64

Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - noarch, x86_64

Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.6) - noarch, x86_64

Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) - noarch, x86_64

Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.1) - noarch, x86_64

Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.2) - noarch, x86_64

Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) - noarch, x86_64

Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - noarch, x86_64

Bugs Fixed

1317981 - CVE-2016-2315 CVE-2016-2324 git: path_name() integer truncation and overflow leading to buffer overflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Critical Alert: Buffer Overflow Vulnerability in git19 - RHSA-2016-0497

Topics Covered

Search Advisories & Updates

Recent Searches

Topics Covered

Topics Covered

Search News & Updates

Recent Searches

Search Advisories & Updates

Recent Searches

Get the latest News and Insights

Our Top Picks

Critical Alert: Buffer Overflow Vulnerability in git19 - RHSA-2016-0497

Solution

Summary

Topics Covered

References

Package List

Topic

Topics Covered

Relevant Releases Architectures

Bugs Fixed

Get the latest News and Insights

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Critical Alert: Buffer Overflow Vulnerability in git19 - RHSA-2016-0497

Topics Covered

Search Advisories & Updates

Recent Searches

Topics Covered

Topics Covered

Search News & Updates

Recent Searches

Search Advisories & Updates

Recent Searches

Get the latest News and Insights

Our Top Picks

Critical Alert: Buffer Overflow Vulnerability in git19 - RHSA-2016-0497

Solution

Summary

Topics Covered

References

Package List

Topic

Topics Covered

Relevant Releases Architectures

Bugs Fixed

Get the latest News and Insights

Related Articles

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!