Oval Definition:	oval:com.redhat.rhsa:def:20130589
Revision Date: 2013-03-04 Version: 635 Title: RHSA-2013:0589: git security update (Moderate) Description: Git is a fast, scalable, distributed revision control system. It was discovered that Git's git-imap-send command, a tool to send a collection of patches from standard input (stdin) to an IMAP folder, did not properly perform SSL X.509 v3 certificate validation on the IMAP server's certificate, as it did not ensure that the server's hostname matched the one provided in the CN field of the server's certificate. A rogue server could use this flaw to conduct man-in-the-middle attacks, possibly leading to the disclosure of sensitive information. (CVE-2013-0308) All git users should upgrade to these updated packages, which contain a backported patch to correct this issue. Family: unix Class: patch Status: Reference(s): CVE-2013-0308 CVE-2013-0308 RHSA-2013:0589 RHSA-2013:0589-01 RHSA-2013:0589-01 Platform(s): Red Hat Enterprise Linux 6 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 6 is installed AND emacs-git is earlier than 0:1.7.1-3.el6_4.1 AND emacs-git is signed with Red Hat redhatrelease2 key emacs-git-el is earlier than 0:1.7.1-3.el6_4.1 AND emacs-git-el is signed with Red Hat redhatrelease2 key git is earlier than 0:1.7.1-3.el6_4.1 AND git is signed with Red Hat redhatrelease2 key git-all is earlier than 0:1.7.1-3.el6_4.1 AND git-all is signed with Red Hat redhatrelease2 key git-cvs is earlier than 0:1.7.1-3.el6_4.1 AND git-cvs is signed with Red Hat redhatrelease2 key git-daemon is earlier than 0:1.7.1-3.el6_4.1 AND git-daemon is signed with Red Hat redhatrelease2 key git-email is earlier than 0:1.7.1-3.el6_4.1 AND git-email is signed with Red Hat redhatrelease2 key git-gui is earlier than 0:1.7.1-3.el6_4.1 AND git-gui is signed with Red Hat redhatrelease2 key git-svn is earlier than 0:1.7.1-3.el6_4.1 AND git-svn is signed with Red Hat redhatrelease2 key gitk is earlier than 0:1.7.1-3.el6_4.1 AND gitk is signed with Red Hat redhatrelease2 key gitweb is earlier than 0:1.7.1-3.el6_4.1 AND gitweb is signed with Red Hat redhatrelease2 key perl-Git is earlier than 0:1.7.1-3.el6_4.1 AND perl-Git is signed with Red Hat redhatrelease2 key
BACK