Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Slackware: 2021-070-01 Moderate: Git Remote Code Execution Threat

slackware
Calendar Grey March 11, 2021
Dist Slackware Esm H88
Recent updates to Git packages for Slackware have been issued to address a significant security vulnerability associated with remote code execution.
New git packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue

Summary

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/git-2.17.6-i586-1_slack14.2.txz: Upgraded. This update fixes a security issue: On case-insensitive file systems with support for symbolic links, if Git is configured globally to apply delay-capable clean/smudge filters (such as Git LFS), Git could be fooled into running remote code during a clone. Credit for finding and fixing this vulnerability goes to Matheus Tavares, helped by Johannes Schindelin. For more information, see: https://www.cve.org/CVERecord?id=CVE-2021-21300 (* Security fix *)

Topics%20covered

Topics Covered

security advisory moderate security issue remote code execution slackware git git update

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 695074b32e19ea8912c0c8e039d67246 git-2.17.6-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: bbfe4df0f55756aa087a22bf9d954638 git-2.17.6-x86_64-1_slack14.0.txz
Slackware 14.1 package: 1e1beb552691af0fbef2e9abf54923b5 git-2.17.6-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: fc4c9a40d1bdec42db0a5b4c5f9f1f8c git-2.17.6-x86_64-1_slack14.1.txz
Slackware 14.2 package: 024d8b9cf96d410e965ae2a097307ba1 git-2.17.6-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: a9ade9e3be9e54c4b459bbe9b030d9a5 git-2.17.6-x86_64-1_slack14.2.txz
Slackware -current package: 04a6620183cffd3d59169184c63c826d d/git-2.30.2-i586-1.txz
Slackware x86_64 -current package: 8639968c64bac54ebb87e6d7ea2cff59 d/git-2.30.2-x86_64-1.txz

Topics%20covered

Topics Covered

security advisory moderate security issue remote code execution slackware git git update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg git-2.17.6-i586-1_slack14.2.txz

Your message here