Synopsis: Moderate: git security update
Issue Date: 2013-03-04
CVE Numbers: CVE-2013-0308
—
It was discovered that Git’s git-imap-send command, a tool to send a
collection of patches from standard input (stdin) to an IMAP folder, did
not properly perform SSL X.509 v3 certificate validation on the IMAP
server’s certificate, as it did not ensure that the server’s hostname
matched the one provided in the CN field of the server’s certificate. A
rogue server could use this flaw to conduct man-in-the-middle attacks,
possibly leading to the disclosure of sensitive information.
(CVE-2013-0308)
—
SL6
x86_64
git-1.7.1-3.el6_4.1.x86_64.rpm
git-daemon-1.7.1-3.el6_4.1.x86_64.rpm
git-debuginfo-1.7.1-3.el6_4.1.x86_64.rpm
i386
git-1.7.1-3.el6_4.1.i686.rpm
git-daemon-1.7.1-3.el6_4.1.i686.rpm
git-debuginfo-1.7.1-3.el6_4.1.i686.rpm
noarch
emacs-git-1.7.1-3.el6_4.1.noarch.rpm
emacs-git-el-1.7.1-3.el6_4.1.noarch.rpm
git-all-1.7.1-3.el6_4.1.noarch.rpm
git-cvs-1.7.1-3.el6_4.1.noarch.rpm
git-email-1.7.1-3.el6_4.1.noarch.rpm
git-gui-1.7.1-3.el6_4.1.noarch.rpm
git-svn-1.7.1-3.el6_4.1.noarch.rpm
gitk-1.7.1-3.el6_4.1.noarch.rpm
gitweb-1.7.1-3.el6_4.1.noarch.rpm
perl-Git-1.7.1-3.el6_4.1.noarch.rpm
– Scientific Linux Development Team
