Oval Definition:oval:org.mitre.oval:def:13564
Revision Date:2014-06-23Version:20
Title:DSA-1777-1 git-core -- file permission error
Description:Peter Palfrader discovered that in the Git revision control system, on some architectures files under /usr/share/git-core/templates/ were owned by a non-root user. This allows a user with that uid on the local system to write to these files and possibly escalate their privileges. This issue only affects the DEC Alpha and MIPS architectures. For the old stable distribution, this problem has been fixed in version 1.4.4.4-4+etch2. For the stable distribution, this problem has been fixed in version 1.5.6.5-3+lenny1. For the unstable distribution, this problem has been fixed in version 1.6.2.1-1. We recommend that you upgrade your git-core package.
Family:unixClass:patch
Status:ACCEPTEDReference(s):DSA-1777-1
Platform(s):Debian GNU/Linux 4.0
Debian GNU/Linux 5.0
Product(s):git-core
Definition Synopsis
  • Release section
  • Debian GNU/Linux 5.0 is installed
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND Packages section
  • git-gui DPKG is earlier than 1.5.6.5-3+lenny1
  • OR git-daemon-run DPKG is earlier than 1.5.6.5-3+lenny1
  • OR gitweb DPKG is earlier than 1.5.6.5-3+lenny1
  • OR git-doc DPKG is earlier than 1.5.6.5-3+lenny1
  • OR git-svn DPKG is earlier than 1.5.6.5-3+lenny1
  • OR git-arch DPKG is earlier than 1.5.6.5-3+lenny1
  • OR git-cvs DPKG is earlier than 1.5.6.5-3+lenny1
  • OR git-email DPKG is earlier than 1.5.6.5-3+lenny1
  • OR gitk DPKG is earlier than 1.5.6.5-3+lenny1
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is s390
  • OR Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is arm
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is mips
  • OR Installed architecture is ia64
  • OR Installed architecture is alpha
  • OR Installed architecture is powerpc
  • OR Installed architecture is mipsel
  • OR Installed architecture is hppa
  • AND git-core DPKG is earlier than 1.5.6.5-3+lenny1
  • OR Release section
  • Debian GNU/Linux 4.0 is installed.
  • AND Architecture section
  • Architecture independent section
  • Installed architecture is all
  • AND Packages section
  • git-daemon-run DPKG is earlier than 1.4.4.4-4+etch2
  • OR gitweb DPKG is earlier than 1.4.4.4-4+etch2
  • OR git-doc DPKG is earlier than 1.4.4.4-4+etch2
  • OR git-svn DPKG is earlier than 1.4.4.4-4+etch2
  • OR git-arch DPKG is earlier than 1.4.4.4-4+etch2
  • OR git-cvs DPKG is earlier than 1.4.4.4-4+etch2
  • OR git-email DPKG is earlier than 1.4.4.4-4+etch2
  • OR gitk DPKG is earlier than 1.4.4.4-4+etch2
  • OR git-core DPKG is earlier than 1.4.4.4-4+etch2
  • BACK