drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in Git
Name: |
Zwei Probleme in Git |
|
ID: |
DSA-3521-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian sid, Debian wheezy, Debian jessie |
|
Datum: |
Sa, 19. März 2016, 21:35 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2324
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2315 |
|
Applikationen: |
Git |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-3521-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso March 19, 2016 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : git CVE ID : CVE-2016-2315 CVE-2016-2324 Debian Bug : 818318
Lael Cellier discovered two buffer overflow vulnerabilities in git, a fast, scalable, distributed revision control system, which could be exploited for remote execution of arbitrary code.
For the oldstable distribution (wheezy), these problems have been fixed in version 1:1.7.10.4-1+wheezy3.
For the stable distribution (jessie), these problems have been fixed in version 1:2.1.4-2.1+deb8u2.
For the unstable distribution (sid), these problems have been fixed in version 1:2.8.0~rc3-1. CVE-2016-2315 was already fixed in version 1:2.7.0-1.
We recommend that you upgrade your git packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJW7WtSAAoJEAVMuPMTQ89En/4P/37MdL3kQWHuFymW/r9iV//0 yGwJVfmqclCGBcAnBDT+xfxQWNon1SW/v+XoQozKw2JJgnR6i3heHgmbd2OiG4EB giiy6fpJdqQEvA+Mf0IqhcYEGJtkAa+WS4mPlWjWA8+IJ3gp05pWqnKAwjI2/RPn BLp5XhvYnMT0O22i7ojXgHA6P2JL+MrFcPkeEtM5053x0RPbbjtdj9ptquiIul7D Z9DghL7xAbydj5irO5oGGHgtuzXzwxj51Pod9TFY1C68AWAuebVBFifKxN3U0HKu 6sI7afX/EIgdbTNvyID5aJeJ3SJ00jmHkankWbgCtfl1Fy0xR+hcQa3CqnbndNlp /PZutcaBtyC1+QrO4WcgctcflItPUCxrzPr57shzsKdsL5N+PI25nLBu9VM/7eqL 4dKKF9oNpaT0XKRAI7H91gF57knmqnmyWYEfzlooCQqSTvHenxQH8vYhEiaF7tfI UwJLpkQqy8LqIFzBG9SU7XzIff8zSshrL7awc0woTDjvwSS0f5Y/M86XVVpbh8/8 VKxBKmPdCL0dXEoWC6mfHLtDysK9AMKj+aXL1sYukaqYl57WNLirzw7xLG2oHDVq 1FXAlDQ+UtveqaS8CaozEPY6dbyMV7316mnJ5i9hnwZLQI1R1goG8/Ecm/oz5Tx1 zrx08lCKzQfxtXUb4CBd =Fp9P -----END PGP SIGNATURE-----
|
|
|
|