Oval Definition:oval:com.redhat.rhsa:def:20201513
Revision Date:2020-04-21Version:636
Title:RHSA-2020:1513: git security update (Important)
Description:Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-server model, Git ensures that each working copy of a Git repository is an exact copy with complete revision history. This not only allows the user to work on and contribute to projects without the need to have permission to push the changes to their official repositories, but also makes it possible for the user to work with no network connection.

Security Fix(es):

  • git: Crafted URL containing new lines can cause credential leak (CVE-2020-5260)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2020-5260
    RHSA-2020:1513
    Platform(s):Red Hat Enterprise Linux 8
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 8 is installed
  • OR Red Hat CoreOS 4 is installed
  • AND
  • git is earlier than 0:2.18.2-2.el8_1
  • AND git is signed with Red Hat redhatrelease2 key
  • git-all is earlier than 0:2.18.2-2.el8_1
  • AND git-all is signed with Red Hat redhatrelease2 key
  • git-core is earlier than 0:2.18.2-2.el8_1
  • AND git-core is signed with Red Hat redhatrelease2 key
  • git-core-doc is earlier than 0:2.18.2-2.el8_1
  • AND git-core-doc is signed with Red Hat redhatrelease2 key
  • git-daemon is earlier than 0:2.18.2-2.el8_1
  • AND git-daemon is signed with Red Hat redhatrelease2 key
  • git-email is earlier than 0:2.18.2-2.el8_1
  • AND git-email is signed with Red Hat redhatrelease2 key
  • git-gui is earlier than 0:2.18.2-2.el8_1
  • AND git-gui is signed with Red Hat redhatrelease2 key
  • git-instaweb is earlier than 0:2.18.2-2.el8_1
  • AND git-instaweb is signed with Red Hat redhatrelease2 key
  • git-subtree is earlier than 0:2.18.2-2.el8_1
  • AND git-subtree is signed with Red Hat redhatrelease2 key
  • git-svn is earlier than 0:2.18.2-2.el8_1
  • AND git-svn is signed with Red Hat redhatrelease2 key
  • gitk is earlier than 0:2.18.2-2.el8_1
  • AND gitk is signed with Red Hat redhatrelease2 key
  • gitweb is earlier than 0:2.18.2-2.el8_1
  • AND gitweb is signed with Red Hat redhatrelease2 key
  • perl-Git is earlier than 0:2.18.2-2.el8_1
  • AND perl-Git is signed with Red Hat redhatrelease2 key
  • perl-Git-SVN is earlier than 0:2.18.2-2.el8_1
  • AND perl-Git-SVN is signed with Red Hat redhatrelease2 key
  • BACK