[SECURITY] Fedora 22 Update: git-2.4.3-7.fc22

updates at fedoraproject.org updates at fedoraproject.org
Sun Nov 8 09:50:45 UTC 2015


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-cf767c77c1
2015-11-08 05:28:27.315410
--------------------------------------------------------------------------------

Name        : git
Product     : Fedora 22
Version     : 2.4.3
Release     : 7.fc22
URL         : http://git-scm.com/
Summary     : Fast Version Control System
Description :
Git is a fast, scalable, distributed revision control system with an
unusually rich command set that provides both high-level operations
and full access to internals.

The git rpm installs the core tools with minimal dependencies.  To
install all git packages, including tools for integrating with other
SCMs, install the git-all meta-package.

--------------------------------------------------------------------------------
Update Information:

  git-2.1.0-6.fc21  - fix arbitrary code execution via crafted URLs   Resolves:
#1269797   git-2.4.3-7.fc22  - fix arbitrary code execution via crafted URLs
Resolves: #1269797   git-2.5.0-2.fc23  - fix arbitrary code execution via
crafted URLs   Resolves: #1269797
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1269794 - git: arbitrary code execution via crafted URLs
        https://bugzilla.redhat.com/show_bug.cgi?id=1269794
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program. Use
su -c 'yum update git' at the command line.
For more information, refer to "Managing Software with yum",
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list