[CLSA-2023:1677231280] git: Fix of 4 CVEs
Type:
security
Severity:
Critical
Release date:
2023-02-24
Description:
- CVE-2022-41903: fix out-of-bounds write caused by integer overflow - CVE-2021-40330: forbid newlines in host and path - CVE-2022-39260: reject too long command line strings - CVE-2023-23946: prevent git-apply from writing behind newly created symbolic links
Updated packages:
  • emacs-git-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:ea208d20f96c799b3d29c907cb1ba9b5f9097b1e
  • emacs-git-el-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:de92c2a38829b987ffa33a79533b55612ccfafb4
  • git-1.7.1-10.el6_10.tuxcare.els1.x86_64.rpm
    sha:862386ab3612dafae4ab936fc52d500f80bf8c38
  • git-all-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:691dc32a74c22b9c735bfc3043bf406fdd106b54
  • git-cvs-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:bf7f1cea962e9711de558b48ce3b0e26e99b77f8
  • git-daemon-1.7.1-10.el6_10.tuxcare.els1.x86_64.rpm
    sha:ee6ce52f977fa7a9ba184193610babe087556066
  • git-email-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:1449c54d02feb4c4b0e76be551af4a60f22af3e1
  • git-gui-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:2e9af3d43d8e05861719ecc0bc33d12361e8444b
  • git-svn-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:164f8f7d13ba5846dd5e4851bbd0a00011e30596
  • gitk-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:3e05a1721b3cd46542e2cf3a5ce30a496365f253
  • gitweb-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:eaba88291b51df5c24b4151fe88f27e80bb33f3c
  • perl-Git-1.7.1-10.el6_10.tuxcare.els1.noarch.rpm
    sha:bcf77ce4c45fc433a46f37d799681fc266bd1c1f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.