MGASA-2017-0153

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0153.html

Import Source

https://advisories.mageia.org/MGASA-2017-0153.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2017-0153

Related

CVE-2017-8386

Published

2017-06-03T23:35:54Z

Modified

2017-06-03T23:24:59Z

Summary

Updated git packages fix security vulnerability

Details

Timo Schmid of ERNW GmbH discovered that the Git git-shell, a restricted login shell for Git-only SSH access, allows a user to run an interactive pager by causing it to spawn "git upload-pack --help" (CVE-2017-8386).

References

https://advisories.mageia.org/MGASA-2017-0153.html
https://bugs.mageia.org/show_bug.cgi?id=20827
https://www.debian.org/security/2017/dsa-3848

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2017-0153

Affected packages