Ubuntu 17.04: 3287-1 Moderate Vulnerability in Git Network Access

ubuntu

May 15, 2017

Git could be made to expose sensitive information over the network.

Summary

Git could be made to expose sensitive information over the network.

Software Description:

- git: fast, scalable, distributed revision control system

Details:

Timo Schmid discovered that the Git restricted shell incorrectly filtered

allowed commands. A remote attacker could possibly use this issue to run an

interactive pager and access sensitive information.

Topics Covered

security advisory moderate severity ubuntu network exposure git

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  git                             1:2.11.0-2ubuntu0.1

Ubuntu 16.10:
  git                             1:2.9.3-1ubuntu0.1

Ubuntu 16.04 LTS:
  git                             1:2.7.4-0ubuntu1.1

Ubuntu 14.04 LTS:
  git                             1:1.9.1-1ubuntu0.5

In general, a standard system update will make all the necessary changes.