[ubuntu/xenial-security] git 1:2.7.4-0ubuntu1.3 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Thu Oct 5 11:56:15 UTC 2017


git (1:2.7.4-0ubuntu1.3) xenial-security; urgency=high

  * SECURITY UPDATE: Git cvsserver OS Command Injection (LP: #1719740)
    - shell-drop-git-cvsserver-support-by-default.diff
    - cvsserver-use-safe_pipe_capture.diff
    - cvsimport-shell-quote-variable-used-in-backticks.diff
    - archimport-use-safe_pipe_capture-for-user-input.diff
    - CVE-2017-14867

Date: 2017-10-04 18:12:16.327546+00:00
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.3
-------------- next part --------------
Sorry, changesfile not available.


More information about the Xenial-changes mailing list