git-1.7.1-4.AXS4.1

エラータID: AXSA:2016-166:01

Release date: 
Wednesday, March 23, 2016 - 21:54
Subject: 
git-1.7.1-4.AXS4.1
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Git is a fast, scalable, distributed revision control system with an
unusually rich command set that provides both high-level operations
and full access to internals.

The git rpm installs the core tools with minimal dependencies. To
install all git packages, including tools for integrating with other
SCMs, install the git-all meta-package.

Security issues fixed with this release:

CVE-2016-2315
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2016-2324
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2016-2315
revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
CVE-2016-2324
Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.
Additional Info: 

N/A

Download: 

SRPMS
  1. git-1.7.1-4.AXS4.1.src.rpm
    MD5: b586ae59f8aea7626e8cf25b572c385e
    SHA-256: 484dbaf7acab419efd0ec9e0685a4b4e832e53553f47bfbc08d5134c12a3a5bc
    Size: 2.40 MB

Asianux Server 4 for x86
  1. git-1.7.1-4.AXS4.1.i686.rpm
    MD5: 75f5267d530f59d3fd44736cf06a1a05
    SHA-256: f69cf4a923f801e4c0b4634c02877962303862f99f0cc5fe3c97b966c19a7245
    Size: 4.51 MB
  2. perl-Git-1.7.1-4.AXS4.1.noarch.rpm
    MD5: dccc4ec30fa0613bb68b5905b0f72b49
    SHA-256: b499822674b03a74e5dd8d9326f8b32d3ca2ea05ecd96e9ce0457a1e815841f0
    Size: 27.39 kB

Asianux Server 4 for x86_64
  1. git-1.7.1-4.AXS4.1.x86_64.rpm
    MD5: ecf4facf6e5125cbca399b97376a2489
    SHA-256: 1c97b6cc5fd56eaa480400f849f7bb4271753297a0b7174b5cb03c80733c8d5c
    Size: 4.61 MB
  2. perl-Git-1.7.1-4.AXS4.1.noarch.rpm
    MD5: 0895fcbd2d02215506a16e21e07a7a50
    SHA-256: 8fc5552c62861971613d28141287eb3b0568f2e821c96ae359b24992ce723aab
    Size: 26.94 kB