Paketname
git
Datum
2009-07-19
Advisory ID
MDVSA-2009:155
Betroffene Versionen
2009.1 i586 , 2009.1 x86_64

Problembeschreibung

A vulnerability has been found and corrected in git:

git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to
cause a denial of service (infinite loop and CPU consumption) via a
request containing extra unrecognized arguments (CVE-2009-2108).

This update provides fixes for this vulnerability.

Aktualisierte Pakete

2009.1 i586

 8df13e5dc18f1f49e5119a1f0ee22028  2009.1/i586/git-1.6.2.5-0.1mdv2009.1.i586.rpm
 3ecabed848010ff0da9d01901908bdec  2009.1/i586/git-arch-1.6.2.5-0.1mdv2009.1.i586.rpm
 7b482a3b50fe57278ca33b14898d26cd  2009.1/i586/git-core-1.6.2.5-0.1mdv2009.1.i586.rpm
 413ee8849de553b859570e0031096e3d  2009.1/i586/git-core-oldies-1.6.2.5-0.1mdv2009.1.i586.rpm
 5c316cb154b8992b3afbd179bf74dba7  2009.1/i586/git-cvs-1.6.2.5-0.1mdv2009.1.i586.rpm
 7191f0ee69cb1863fba67bdb306e8a2f  2009.1/i586/git-email-1.6.2.5-0.1mdv2009.1.i586.rpm
 535d852ed5a5410610112606b4c48102  2009.1/i586/gitk-1.6.2.5-0.1mdv2009.1.i586.rpm
 e109cdefd93c3febd126ee21ab10bd2e  2009.1/i586/git-svn-1.6.2.5-0.1mdv2009.1.i586.rpm
 f658300c4d0368f82fd98444fce4261a  2009.1/i586/gitview-1.6.2.5-0.1mdv2009.1.i586.rpm
 6ed62f0448fd4aec1356299cac9d7875  2009.1/i586/gitweb-1.6.2.5-0.1mdv2009.1.i586.rpm
 74dd7b0d6a0bc8d485aaf651334e6add  2009.1/i586/libgit-devel-1.6.2.5-0.1mdv2009.1.i586.rpm
 501e8acb6a19e8567517ea47dd2c5b1a  2009.1/i586/perl-Git-1.6.2.5-0.1mdv2009.1.i586.rpm 
 fc4d408843399806dec0d351e3d8d34a  2009.1/SRPMS/git-1.6.2.5-0.1mdv2009.1.src.rpm

2009.1 x86_64

 b2c19731c9eda6261dafd081898fa03b  2009.1/x86_64/git-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 b40e5fd9d15b682d60d6781c537df053  2009.1/x86_64/git-arch-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 e6e4d4756758e982b5ffcb47695e1ef0  2009.1/x86_64/git-core-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 02f877fb8cdcac2fc349e23e53c7efa1  2009.1/x86_64/git-core-oldies-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 989114ca6e1dd1bf79e226f4097caa79  2009.1/x86_64/git-cvs-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 eaa00be9559e3fa41d8d9b6d07b58d17  2009.1/x86_64/git-email-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 270f8b08dfb63f63aa9492119c4c3b00  2009.1/x86_64/gitk-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 3048662bc566a66aae9c4804414c0c51  2009.1/x86_64/git-svn-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 66c429d250064ee8802abc09418a3231  2009.1/x86_64/gitview-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 525fcbdd247bf765e9bf7312732b92c5  2009.1/x86_64/gitweb-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 a3f1a4a121a2c578bfc06d0a27543615  2009.1/x86_64/lib64git-devel-1.6.2.5-0.1mdv2009.1.x86_64.rpm
 26284441a52b4b38310bbd35a517cfd8  2009.1/x86_64/perl-Git-1.6.2.5-0.1mdv2009.1.x86_64.rpm 
 fc4d408843399806dec0d351e3d8d34a  2009.1/SRPMS/git-1.6.2.5-0.1mdv2009.1.src.rpm

Referenzen