Synopsis: Important: git security update
Advisory ID: SLSA-2016:0496-1
Issue Date: 2016-03-23
CVE Numbers: CVE-2016-2315
CVE-2016-2324
—
An integer truncation flaw and an integer overflow flaw, both leading to a
heap-based buffer overflow, were found in the way Git processed certain
path information. A remote attacker could create a specially crafted Git
repository that would cause a Git client or server to crash or, possibly,
execute arbitrary code. (CVE-2016-2315, CVE-2016-2324)
—
SL6
x86_64
git-1.7.1-4.el6_7.1.x86_64.rpm
git-daemon-1.7.1-4.el6_7.1.x86_64.rpm
git-debuginfo-1.7.1-4.el6_7.1.x86_64.rpm
i386
git-1.7.1-4.el6_7.1.i686.rpm
git-daemon-1.7.1-4.el6_7.1.i686.rpm
git-debuginfo-1.7.1-4.el6_7.1.i686.rpm
noarch
emacs-git-1.7.1-4.el6_7.1.noarch.rpm
emacs-git-el-1.7.1-4.el6_7.1.noarch.rpm
git-all-1.7.1-4.el6_7.1.noarch.rpm
git-cvs-1.7.1-4.el6_7.1.noarch.rpm
git-email-1.7.1-4.el6_7.1.noarch.rpm
git-gui-1.7.1-4.el6_7.1.noarch.rpm
git-svn-1.7.1-4.el6_7.1.noarch.rpm
gitk-1.7.1-4.el6_7.1.noarch.rpm
gitweb-1.7.1-4.el6_7.1.noarch.rpm
perl-Git-1.7.1-4.el6_7.1.noarch.rpm
SL7
x86_64
git-1.8.3.1-6.el7_2.1.x86_64.rpm
git-daemon-1.8.3.1-6.el7_2.1.x86_64.rpm
git-debuginfo-1.8.3.1-6.el7_2.1.x86_64.rpm
git-svn-1.8.3.1-6.el7_2.1.x86_64.rpm
noarch
emacs-git-1.8.3.1-6.el7_2.1.noarch.rpm
emacs-git-el-1.8.3.1-6.el7_2.1.noarch.rpm
git-all-1.8.3.1-6.el7_2.1.noarch.rpm
git-bzr-1.8.3.1-6.el7_2.1.noarch.rpm
git-cvs-1.8.3.1-6.el7_2.1.noarch.rpm
git-email-1.8.3.1-6.el7_2.1.noarch.rpm
git-gui-1.8.3.1-6.el7_2.1.noarch.rpm
git-hg-1.8.3.1-6.el7_2.1.noarch.rpm
git-p4-1.8.3.1-6.el7_2.1.noarch.rpm
gitk-1.8.3.1-6.el7_2.1.noarch.rpm
gitweb-1.8.3.1-6.el7_2.1.noarch.rpm
perl-Git-1.8.3.1-6.el7_2.1.noarch.rpm
perl-Git-SVN-1.8.3.1-6.el7_2.1.noarch.rpm
– Scientific Linux Development Team