[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2017:2491-01 -- Redhat rh-git29-git

ID: oval:org.secpod.oval:def:505078Date: (C)2021-02-03   (M)2022-08-31
Class: PATCHFamily: unix




Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. Security Fix: * A shell command injection flaw related to the handling of ssh URLs has been discovered in Git. An attacker could use this flaw to execute shell commands with the privileges of the user running the Git client, for example, when performing a clone action on a malicious repository or a legitimate repository containing a malicious commit. * A flaw was found in the way git-shell handled command-line options for the restricted set of git-shell commands. A remote, authenticated attacker could use this flaw to bypass git-shell restrictions, to view and manipulate files, by abusing the instance of the less command launched using crafted command-line options

Platform:
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 6
Product:
rh-git29-git
Reference:
RHSA-2017:2491-01
CVE-2017-1000117
CVE-2017-8386
CVE    2
CVE-2017-1000117
CVE-2017-8386
CPE    3
cpe:/a:redhat:rh-git29-git
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:6

© SecPod Technologies