Security update for git
SUSE Security Update: Security update for git
This update fixes the following security issue:
* CVE-2014-9390: arbitrary command execution vulnerability on
case-insensitive file systems (bnc#910756)
Please note that Linux is usually not affected, unless you operate git on
FAT, NTFS or other non Linux filesystems
Security Issues:
* CVE-2014-9390
| Announcement ID: | SUSE-SU-2015:0154-1 |
| Rating: | moderate |
| References: | #910756 |
| Affected Products: |
An update that fixes one vulnerability is now available.
Description:
This update fixes the following security issue:
* CVE-2014-9390: arbitrary command execution vulnerability on
case-insensitive file systems (bnc#910756)
Please note that Linux is usually not affected, unless you operate git on
FAT, NTFS or other non Linux filesystems
Security Issues:
* CVE-2014-9390
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Studio Onsite 1.3:
zypper in -t patch slestso13-git-10173
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Studio Onsite 1.3 (x86_64):
- git-1.7.12.4-0.9.1
- git-core-1.7.12.4-0.9.1
References:
- http://support.novell.com/security/cve/CVE-2014-9390.html
- https://bugzilla.suse.com/show_bug.cgi?id=910756
- http://download.suse.com/patch/finder/?keywords=b8869b7df1bbf98dce214a566d9ad641