git (SL7)

Synopsis: Important: git security update
Advisory ID: SLSA-2023:0978-1
Issue Date: 2023-02-28
CVE Numbers: CVE-2022-23521
CVE-2022-41903

Security Fix(es):

* git: gitattributes parsing integer overflow (CVE-2022-23521)

* git: Heap overflow in `git archive`, `git log –format` leading to RCE
(CVE-2022-41903)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE

SL7
x86_64
git-1.8.3.1-24.el7_9.x86_64.rpm
git-daemon-1.8.3.1-24.el7_9.x86_64.rpm
git-debuginfo-1.8.3.1-24.el7_9.x86_64.rpm
git-gnome-keyring-1.8.3.1-24.el7_9.x86_64.rpm
git-svn-1.8.3.1-24.el7_9.x86_64.rpm
noarch
emacs-git-1.8.3.1-24.el7_9.noarch.rpm
emacs-git-el-1.8.3.1-24.el7_9.noarch.rpm
git-all-1.8.3.1-24.el7_9.noarch.rpm
git-bzr-1.8.3.1-24.el7_9.noarch.rpm
git-cvs-1.8.3.1-24.el7_9.noarch.rpm
git-email-1.8.3.1-24.el7_9.noarch.rpm
git-gui-1.8.3.1-24.el7_9.noarch.rpm
git-hg-1.8.3.1-24.el7_9.noarch.rpm
git-instaweb-1.8.3.1-24.el7_9.noarch.rpm
git-p4-1.8.3.1-24.el7_9.noarch.rpm
gitk-1.8.3.1-24.el7_9.noarch.rpm
gitweb-1.8.3.1-24.el7_9.noarch.rpm
perl-Git-1.8.3.1-24.el7_9.noarch.rpm
perl-Git-SVN-1.8.3.1-24.el7_9.noarch.rpm

– Scientific Linux Development Team