git-1.7.1-9.AXS4

エラータID: AXSA:2017-1899:02

Release date: 
Sunday, August 27, 2017 - 23:05
Subject: 
git-1.7.1-9.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Git is a fast, scalable, distributed revision control system with an
unusually rich command set that provides both high-level operations
and full access to internals.

The git rpm installs the core tools with minimal dependencies. To
install all git packages, including tools for integrating with other
SCMs, install the git-all meta-package.

CVE-2017-1000
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2017-1000117
A malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL can result in any program that exists on the victim's machine being executed. Such a URL could be placed in the .gitmodules file of a malicious project, and an unsuspecting victim could be tricked into running "git clone --recurse-submodules" to trigger the vulnerability.
Additional Info: 

N/A

Download: 

SRPMS
  1. git-1.7.1-9.AXS4.src.rpm
    MD5: 0975b3f6af7c4f1ee98108760fdea25d
    SHA-256: 85963b4eebe77aa299316b42c0754a2fa47b60d0cef3c72f2fd859fc827a850f
    Size: 2.40 MB

Asianux Server 4 for x86
  1. git-1.7.1-9.AXS4.i686.rpm
    MD5: 1e007f6aeff5d594f1cec64e8a2e169c
    SHA-256: 6c9764a131f91dea8d225f68084b3f0c4e7fda2445e86e378c591cdac416a5f3
    Size: 4.51 MB
  2. perl-Git-1.7.1-9.AXS4.noarch.rpm
    MD5: f759c3c8fe1749052ec8f52c417c6c7b
    SHA-256: 670db5ea0f8cfd68edc515481dcf3871a23f3ff0acced3d209b86da7bd39e7a0
    Size: 28.26 kB

Asianux Server 4 for x86_64
  1. git-1.7.1-9.AXS4.x86_64.rpm
    MD5: 15dce25ce34b121cbc01228652312db7
    SHA-256: b86ce932fd2d99d6e01713de765d84949de26d465e02bcc063f3154b54e9c8e7
    Size: 4.61 MB
  2. perl-Git-1.7.1-9.AXS4.noarch.rpm
    MD5: 2d6a15b403fee63292607864cfa4f517
    SHA-256: 705ea44dd279eff61a9bd7abac346f9432ae2532a48be7f9993122ade3683185
    Size: 27.81 kB