Ubuntu
git-core package

git-core 1:1.5.4.3-1ubuntu2.1 source package in Ubuntu

Changelog

git-core (1:1.5.4.3-1ubuntu2.1) hardy-security; urgency=high

  [ David Leadbeater ]
  * SECURITY UPDATE: Fix remote code execution in gitweb (LP: #317052)
    - CVE-2008-5516: http://repo.or.cz/w/git.git?a=commitdiff;h=c582abae
    - CVE-2008-5517: http://repo.or.cz/w/git.git?a=commitdiff;h=516381d5

  [ Marc Deslauriers ]
  * SECURITY UPDATE: arbitrary code execution via long PATH in diff_addremove
    and diff_change (LP: #248750)
    - debian/diff/0007-SECURITY-CVE-2008-3546.diff: safely build the full path.
    - CVE-2008-3546
  * SECURITY UPDATE: arbitrary command execution via diff.external configuration
    variable.
    - debian/diff/0008-SECURITY-CVE-2008-5916.diff: remove unused legacy-style
      URI code in gitweb/gitweb.perl.
    - CVE-2008-5916

 -- Marc Deslauriers <email address hidden>   Thu, 12 Feb 2009 15:49:08 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Hardy
Original maintainer:
Ubuntu Development Team
Architectures:
any
Section:
devel
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
git-core_1.5.4.3.orig.tar.gz 1.8 MiB fb22b6809041a26718ce263a9379ee04d4287540e687c5dd5532e8db22ac09a6
git-core_1.5.4.3-1ubuntu2.1.diff.gz 196.1 KiB 9d2570f5a4ab5550f2c8150fa639f698703455c57f6ae151ad97aecf3b126899
git-core_1.5.4.3-1ubuntu2.1.dsc 981 bytes 38cf6e40551793f1768d8683bced8a490b05b29010989071ac4cfe3415632230

View changes file

Binary packages built by this source

git-arch: No summary available for git-arch in ubuntu hardy.

No description available for git-arch in ubuntu hardy.

git-core: No summary available for git-core in ubuntu hardy.

No description available for git-core in ubuntu hardy.

git-cvs: No summary available for git-cvs in ubuntu hardy.

No description available for git-cvs in ubuntu hardy.

git-daemon-run: No summary available for git-daemon-run in ubuntu hardy.

No description available for git-daemon-run in ubuntu hardy.

git-doc: No summary available for git-doc in ubuntu hardy.

No description available for git-doc in ubuntu hardy.

git-email: No summary available for git-email in ubuntu hardy.

No description available for git-email in ubuntu hardy.

git-gui: No summary available for git-gui in ubuntu hardy.

No description available for git-gui in ubuntu hardy.

git-svn: No summary available for git-svn in ubuntu hardy.

No description available for git-svn in ubuntu hardy.

gitk: No summary available for gitk in ubuntu hardy.

No description available for gitk in ubuntu hardy.

gitweb: No summary available for gitweb in ubuntu hardy.

No description available for gitweb in ubuntu hardy.