Security update for git
SUSE Security Update: Security update for git
This update fixes the following security issue:
* CVE-2014-9390: Arbitrary command execution vulnerability on
case-insensitive file systems. (bsc#910756)
Linux systems are normally not affected by this issue, unless git is
operating on FAT, NTFS or other non Linux file systems.
Security Issues:
* CVE-2014-9390
| Announcement ID: | SUSE-SU-2015:0154-2 |
| Rating: | moderate |
| References: | #910756 |
| Affected Products: |
An update that fixes one vulnerability is now available.
Description:
This update fixes the following security issue:
* CVE-2014-9390: Arbitrary command execution vulnerability on
case-insensitive file systems. (bsc#910756)
Linux systems are normally not affected by this issue, unless git is
operating on FAT, NTFS or other non Linux file systems.
Security Issues:
* CVE-2014-9390
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Software Development Kit 11 SP3:
zypper in -t patch sdksp3-git-10174
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Linux Enterprise Software Development Kit 11 SP3 (i586 ia64 ppc64 s390x x86_64):
- git-1.7.12.4-0.9.1
- git-arch-1.7.12.4-0.9.1
- git-core-1.7.12.4-0.9.1
- git-cvs-1.7.12.4-0.9.1
- git-daemon-1.7.12.4-0.9.1
- git-email-1.7.12.4-0.9.1
- git-gui-1.7.12.4-0.9.1
- git-svn-1.7.12.4-0.9.1
- git-web-1.7.12.4-0.9.1
- gitk-1.7.12.4-0.9.1
References:
- http://support.novell.com/security/cve/CVE-2014-9390.html
- https://bugzilla.suse.com/show_bug.cgi?id=910756
- http://download.suse.com/patch/finder/?keywords=a2f19610a12483beb95e8317e4121f61