Ubuntu alert USN-3829-1 (git)
| From: | "Leonidas S. Barbosa" <leo.barbosa@canonical.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-3829-1] Git vulnerabilities | |
| Date: | Tue, 27 Nov 2018 21:15:23 -0300 | |
| Message-ID: | <1543364123.4115.1.camel@canonical.com> |
========================================================================== Ubuntu Security Notice USN-3829-1 November 27, 2018 git vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Git. Software Description: - git: fast, scalable, distributed revision control system Details: It was discovered that Git incorrectly handled layers of tree objects. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-15298) It was discovered that Git incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 18.04 LTS and Ubuntu 18.10. (CVE-2018-19486) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: git 1:2.19.1-1ubuntu1.1 Ubuntu 18.04 LTS: git 1:2.17.1-1ubuntu0.4 Ubuntu 16.04 LTS: git 1:2.7.4-0ubuntu1.6 Ubuntu 14.04 LTS: git 1:1.9.1-1ubuntu0.10 In general, a standard system update will make all the necessary changes. References: https://usn.ubuntu.com/usn/usn-3829-1 CVE-2017-15298, CVE-2018-19486 Package Information: https://launchpad.net/ubuntu/+source/git/1:2.19.1-1ubuntu1.1 https://launchpad.net/ubuntu/+source/git/1:2.17.1-1ubuntu0.4 https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.6 https://launchpad.net/ubuntu/+source/git/1:1.9.1-1ubuntu0.10-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security...