SUSE-SU-2015:2184-1

Source
https://www.suse.com/support/update/announcement/2015/suse-su-20152184-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:2184-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2015:2184-1
Published
2015-12-03T13:46:22Z
Modified
2015-12-03T13:46:22Z
Summary
Recommended update for git
Details

The git package was updated to fix the following security issue:

  • Fix remote code execution with recursive fetch of submodules (bsc#948969).
References

Affected packages

SUSE:Linux Enterprise Software Development Kit 11 SP3
git

Package

Name
git
Purl
pkg:rpm/suse/git&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.7.12.4-0.11.2

Ecosystem specific

{
    "binaries": [
        {
            "git": "1.7.12.4-0.11.2",
            "git-arch": "1.7.12.4-0.11.2",
            "git-core": "1.7.12.4-0.11.2",
            "git-cvs": "1.7.12.4-0.11.2",
            "git-daemon": "1.7.12.4-0.11.2",
            "git-email": "1.7.12.4-0.11.2",
            "git-gui": "1.7.12.4-0.11.2",
            "git-svn": "1.7.12.4-0.11.2",
            "git-web": "1.7.12.4-0.11.2",
            "gitk": "1.7.12.4-0.11.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:2184-1.json"
SUSE:Linux Enterprise Software Development Kit 11 SP4
git

Package

Name
git
Purl
pkg:rpm/suse/git&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.7.12.4-0.11.2

Ecosystem specific

{
    "binaries": [
        {
            "git": "1.7.12.4-0.11.2",
            "git-arch": "1.7.12.4-0.11.2",
            "git-core": "1.7.12.4-0.11.2",
            "git-cvs": "1.7.12.4-0.11.2",
            "git-daemon": "1.7.12.4-0.11.2",
            "git-email": "1.7.12.4-0.11.2",
            "git-gui": "1.7.12.4-0.11.2",
            "git-svn": "1.7.12.4-0.11.2",
            "git-web": "1.7.12.4-0.11.2",
            "gitk": "1.7.12.4-0.11.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:2184-1.json"
SUSE:OpenStack Cloud 5
git

Package

Name
git
Purl
pkg:rpm/suse/git&distro=SUSE%20OpenStack%20Cloud%205

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.7.12.4-0.11.2

Ecosystem specific

{
    "binaries": [
        {
            "git-core": "1.7.12.4-0.11.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:2184-1.json"
SUSE:Studio Onsite 1.3
git

Package

Name
git
Purl
pkg:rpm/suse/git&distro=SUSE%20Studio%20Onsite%201.3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.7.12.4-0.11.2

Ecosystem specific

{
    "binaries": [
        {
            "git": "1.7.12.4-0.11.2",
            "git-core": "1.7.12.4-0.11.2"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:2184-1.json"