RHSA-2023:3382HighCVSS 7.8

Red Hat Security Advisory: git security update

Published
May 31, 2023
Last Modified
November 6, 2026

🔗 CVE IDs covered (3)

CVE-2023-29007 →CVE-2023-25652 →CVE-2023-25815 →

📋 Description

CVE-2023-25652 — git: by feeding specially crafted input to git apply --reject, a path outside the working tree can be overwritten with partially controlled contents CVE-2023-25815 — git: malicious placement of crafted messages when git was compiled with runtime prefix CVE-2023-29007 — git: arbitrary configuration injection when renaming or deleting a section from a configuration file

🎯 Affected products21

  • Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-0:2.18.4-4.el8_2.src as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-all-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-core-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-core-debuginfo-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-core-doc-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-daemon-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-daemon-debuginfo-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-debuginfo-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-debugsource-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-email-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-gui-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-instaweb-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-subtree-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-svn-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • git-svn-debuginfo-0:2.18.4-4.el8_2.x86_64 as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • gitk-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • gitweb-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • perl-Git-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)
  • perl-Git-SVN-0:2.18.4-4.el8_2.noarch as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 References (6)