ELSA-2017-2004

ELSA-2017-2004 - git security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2017-08-07

Description

[1.8.3.1-11]
- dissalow repo names beginning with dash
Resolves: CVE-2017-8386

[-1.8.3.1-10]
- do not put unsanitized branch names in
Resolves: CVE-2014-9938

[-1.8.3.1-9]
- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
authentication
Resolves: #1369173

[1.8.3.1-8]
- remove needles check of xmalloc from previous patch
Resolves: #1318255

[1.8.3.1-7]
- fix heap overflow CVE-2016-2315 CVE-2016-2324
Resolves: #1318255

Related CVEs

CVE-2017-8386

CVE-2014-9938

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	git-1.8.3.1-11.el7.src.rpm	9aa16c88c7031f7ec728281d01f4f7bf	ELSA-2020-2337
	emacs-git-1.8.3.1-11.el7.noarch.rpm	4d206919d52ccaf811f8036afadce808	ELSA-2020-2337
	emacs-git-el-1.8.3.1-11.el7.noarch.rpm	29d6a3ddde1b2e224af3e94f183969b6	ELSA-2020-2337
	git-1.8.3.1-11.el7.aarch64.rpm	c3371ad7be9c55b882f47b60d237c9ac	ELSA-2020-2337
	git-all-1.8.3.1-11.el7.noarch.rpm	ac8fecc82c89a7c7fa690c3870442d86	ELSA-2020-2337
	git-bzr-1.8.3.1-11.el7.noarch.rpm	b6bac086e7b698472b55ac1281e33209	ELSA-2020-2337
	git-cvs-1.8.3.1-11.el7.noarch.rpm	99606881f3f8e48a01dd23e38963b1be	ELSA-2020-2337
	git-daemon-1.8.3.1-11.el7.aarch64.rpm	b7f77a4a1c9a3870ab565aed5d81d2b3	ELSA-2020-2337
	git-email-1.8.3.1-11.el7.noarch.rpm	b3d36646e5624528c244cf185bc0a493	ELSA-2020-2337
	git-gui-1.8.3.1-11.el7.noarch.rpm	1995c0d4846184eaf6195bda51a2a0cc	ELSA-2020-2337
	git-hg-1.8.3.1-11.el7.noarch.rpm	c169295cd728e1b82b47fb83c36f78ea	ELSA-2020-2337
	git-p4-1.8.3.1-11.el7.noarch.rpm	913a1e6179879714181bf776abd2f105	ELSA-2020-2337
	git-svn-1.8.3.1-11.el7.aarch64.rpm	3b05bceb776b9749f60e73c370af5270	ELSA-2020-2337
	gitk-1.8.3.1-11.el7.noarch.rpm	aab13cb86f7295412e9ad4d3e2ba4209	ELSA-2020-2337
	gitweb-1.8.3.1-11.el7.noarch.rpm	9ea6536c35571e9c51102de53a22fe6d	ELSA-2020-2337
	perl-Git-1.8.3.1-11.el7.noarch.rpm	dbb0a0ef013a0523131fd07110de1bfe	ELSA-2020-2337
	perl-Git-SVN-1.8.3.1-11.el7.noarch.rpm	2275cb8aff712dbcafdffb435ec77c8b	ELSA-2020-2337
Oracle Linux 7 (x86_64)	git-1.8.3.1-11.el7.src.rpm	9aa16c88c7031f7ec728281d01f4f7bf	ELSA-2020-2337
	emacs-git-1.8.3.1-11.el7.noarch.rpm	4d206919d52ccaf811f8036afadce808	ELSA-2020-2337
	emacs-git-el-1.8.3.1-11.el7.noarch.rpm	29d6a3ddde1b2e224af3e94f183969b6	ELSA-2020-2337
	git-1.8.3.1-11.el7.x86_64.rpm	dc1fa559681022affe7b83f3518a833c	ELSA-2020-2337
	git-all-1.8.3.1-11.el7.noarch.rpm	ac8fecc82c89a7c7fa690c3870442d86	ELSA-2020-2337
	git-bzr-1.8.3.1-11.el7.noarch.rpm	b6bac086e7b698472b55ac1281e33209	ELSA-2020-2337
	git-cvs-1.8.3.1-11.el7.noarch.rpm	99606881f3f8e48a01dd23e38963b1be	ELSA-2020-2337
	git-daemon-1.8.3.1-11.el7.x86_64.rpm	5461425cd9f81067056f0f012d2cd00d	ELSA-2020-2337
	git-email-1.8.3.1-11.el7.noarch.rpm	b3d36646e5624528c244cf185bc0a493	ELSA-2020-2337
	git-gui-1.8.3.1-11.el7.noarch.rpm	1995c0d4846184eaf6195bda51a2a0cc	ELSA-2020-2337
	git-hg-1.8.3.1-11.el7.noarch.rpm	c169295cd728e1b82b47fb83c36f78ea	ELSA-2020-2337
	git-p4-1.8.3.1-11.el7.noarch.rpm	913a1e6179879714181bf776abd2f105	ELSA-2020-2337
	git-svn-1.8.3.1-11.el7.x86_64.rpm	9a1f5f19433c37c6eca9b7d1c534df69	ELSA-2020-2337
	gitk-1.8.3.1-11.el7.noarch.rpm	aab13cb86f7295412e9ad4d3e2ba4209	ELSA-2020-2337
	gitweb-1.8.3.1-11.el7.noarch.rpm	9ea6536c35571e9c51102de53a22fe6d	ELSA-2020-2337
	perl-Git-1.8.3.1-11.el7.noarch.rpm	dbb0a0ef013a0523131fd07110de1bfe	ELSA-2020-2337
	perl-Git-SVN-1.8.3.1-11.el7.noarch.rpm	2275cb8aff712dbcafdffb435ec77c8b	ELSA-2020-2337

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team