MGASA-2018-0395

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2018-0395.html

Import Source

https://advisories.mageia.org/MGASA-2018-0395.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2018-0395

Related

CVE-2018-17456

Published

2018-10-14T00:58:33Z

Modified

2018-10-14T00:33:44Z

Summary

Updated git packages fix security vulnerability

Details

joernchen of Phenoelit discovered that git is prone to an arbitrary code execution vulnerability due to insufficient validation of submodule url and path via a specially crafted .gitmodules file in a project cloned with --recurse-submodules (CVE-2018-17456).

References

https://advisories.mageia.org/MGASA-2018-0395.html
https://bugs.mageia.org/show_bug.cgi?id=23642

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

MGASA-2018-0395

Affected packages