stable

git-2.14.3-2.fc27

FEDORA-2017-2c7ddf53d3 created by tmz 7 years ago for Fedora 27

Previous versions of git mishandled layers of tree objects, which allowed remote attackers to cause a denial of service (memory consumption) via a crafted repository, aka a git bomb. This can also have an impact of disk consumption; however, an affected process typically would not survive its attempt to build the data structure in memory before writing to disk.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-2c7ddf53d3

This update has been submitted for testing by tmz.

7 years ago

This update has been pushed to testing.

7 years ago
User Icon imabug provided feedback 7 years ago
karma
User Icon nathan95 commented & provided feedback 7 years ago
karma

Ok work for me

User Icon cserpentis commented & provided feedback 7 years ago
karma

works for me

This update has been submitted for batched by bodhi.

7 years ago

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata
Type
security
Severity
low
Karma
3
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
7 years ago
in testing
7 years ago
in stable
7 years ago
BZ#1510457 CVE-2017-15298 git: Mishandling layers of tree objects [fedora-all]
0
0

Automated Test Results