Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

SUSE: 2018:4190-1 Moderate: Git Command Execution Issue

suse
Calendar Grey December 19, 2018
Dist Suse Esm H88
The recent SUSE security patch for git tackles several moderate vulnerabilities. It is crucial to keep your systems current by applying the latest updates.
An update that fixes one vulnerability is now available

Summary

This update for git fixes the following issues: Security issue fixed: - CVE-2018-19486: Fixed git that executed commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and run-command.c, because there was (bsc#1117257). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Open Buildservice Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-OBS-15-2018-2990=1 - SUSE Linux Enterprise Module for Development Tools 15: zypper in -t patch SUSE-SLE-Module-Development-Tools-15-2018-2990=1

Topics%20covered

Topics Covered

security advisory moderate execution issue git SUSE Linux Enterprise

References

#1117257

Cross- CVE-2018-19486

Affected Products:

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15

SUSE Linux Enterprise Module for Development Tools 15

SUSE Linux Enterprise Module for Basesystem 15

https://www.suse.com/security/cve/CVE-2018-19486.html

https://bugzilla.suse.com/1117257

Announcement ID: SUSE-SU-2018:4190-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate execution issue git SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here