Scientific Linux alert SLSA-2020:2337-1 (git)

From:
             
 
Farhan Ahmed <fahmed@fnal.gov> 
To:
             
 
scientific-linux-errata@listserv.fnal.gov 
Subject:
             
 
Security ERRATA Important: git on SL7.x x86_64 
Date:
             
 
Fri, 29 May 2020 12:54:47 -0000
Message-ID:
             
 
<20200529125447.4822.88444@slpackages.fnal.gov>
Synopsis:          Important: git security update
Advisory ID:       SLSA-2020:2337-1
Issue Date:        2020-05-29
CVE Numbers:       None
--

Security Fix(es):

* git: Crafted URL containing new lines, empty host or lacks a scheme can
cause credential leak (CVE-2020-11008)

--

SL7
  x86_64
    git-1.8.3.1-23.el7_8.x86_64.rpm
    git-daemon-1.8.3.1-23.el7_8.x86_64.rpm
    git-debuginfo-1.8.3.1-23.el7_8.x86_64.rpm
    git-gnome-keyring-1.8.3.1-23.el7_8.x86_64.rpm
    git-svn-1.8.3.1-23.el7_8.x86_64.rpm
  noarch
    emacs-git-1.8.3.1-23.el7_8.noarch.rpm
    emacs-git-el-1.8.3.1-23.el7_8.noarch.rpm
    git-all-1.8.3.1-23.el7_8.noarch.rpm
    git-bzr-1.8.3.1-23.el7_8.noarch.rpm
    git-cvs-1.8.3.1-23.el7_8.noarch.rpm
    git-email-1.8.3.1-23.el7_8.noarch.rpm
    git-gui-1.8.3.1-23.el7_8.noarch.rpm
    git-hg-1.8.3.1-23.el7_8.noarch.rpm
    git-instaweb-1.8.3.1-23.el7_8.noarch.rpm
    git-p4-1.8.3.1-23.el7_8.noarch.rpm
    gitk-1.8.3.1-23.el7_8.noarch.rpm
    gitweb-1.8.3.1-23.el7_8.noarch.rpm
    perl-Git-1.8.3.1-23.el7_8.noarch.rpm
    perl-Git-SVN-1.8.3.1-23.el7_8.noarch.rpm

- Scientific Linux Development Team