Oval Definition:	oval:com.redhat.rhsa:def:20152561
Revision Date: 2015-12-08 Version: 635 Title: RHSA-2015:2561: git security update (Moderate) Description: Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection. A flaw was found in the way the git-remote-ext helper processed certain URLs. If a user had Git configured to automatically clone submodules from untrusted repositories, an attacker could inject commands into the URL of a submodule, allowing them to execute arbitrary code on the user's system. (BZ#1269794) All git users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. Family: unix Class: patch Status: Reference(s): CVE-2015-7545 RHSA-2015:2561 RHSA-2015:2561-01 RHSA-2015:2561-02 Platform(s): Red Hat Enterprise Linux 7 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 7 is installed AND emacs-git is earlier than 0:1.8.3.1-6.el7 AND emacs-git is signed with Red Hat redhatrelease2 key emacs-git-el is earlier than 0:1.8.3.1-6.el7 AND emacs-git-el is signed with Red Hat redhatrelease2 key git is earlier than 0:1.8.3.1-6.el7 AND git is signed with Red Hat redhatrelease2 key git-all is earlier than 0:1.8.3.1-6.el7 AND git-all is signed with Red Hat redhatrelease2 key git-bzr is earlier than 0:1.8.3.1-6.el7 AND git-bzr is signed with Red Hat redhatrelease2 key git-cvs is earlier than 0:1.8.3.1-6.el7 AND git-cvs is signed with Red Hat redhatrelease2 key git-daemon is earlier than 0:1.8.3.1-6.el7 AND git-daemon is signed with Red Hat redhatrelease2 key git-email is earlier than 0:1.8.3.1-6.el7 AND git-email is signed with Red Hat redhatrelease2 key git-gui is earlier than 0:1.8.3.1-6.el7 AND git-gui is signed with Red Hat redhatrelease2 key git-hg is earlier than 0:1.8.3.1-6.el7 AND git-hg is signed with Red Hat redhatrelease2 key git-p4 is earlier than 0:1.8.3.1-6.el7 AND git-p4 is signed with Red Hat redhatrelease2 key git-svn is earlier than 0:1.8.3.1-6.el7 AND git-svn is signed with Red Hat redhatrelease2 key gitk is earlier than 0:1.8.3.1-6.el7 AND gitk is signed with Red Hat redhatrelease2 key gitweb is earlier than 0:1.8.3.1-6.el7 AND gitweb is signed with Red Hat redhatrelease2 key perl-Git is earlier than 0:1.8.3.1-6.el7 AND perl-Git is signed with Red Hat redhatrelease2 key perl-Git-SVN is earlier than 0:1.8.3.1-6.el7 AND perl-Git-SVN is signed with Red Hat redhatrelease2 key
BACK