ALT Linux Team

Branch sisyphus update on 2016-11-09

2016-11-09

ALT-BU-2016-3125-1

Branch sisyphus update bulletin.

ALT-PU-2016-2254-1

Package libgit2 updated to version 0.24.3-alt1 for branch sisyphus in task 172042.

Closed vulnerabilities

Published: 2017-02-03
Modified: 2024-11-21

CVE-2016-8568

The git_commit_message function in oid.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (out-of-bounds read) via a cat-file command with a crafted object file.

Severity: MEDIUM (5.5) Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
Published: 2017-02-03
Modified: 2024-11-21

CVE-2016-8569

The git_oid_nfmt function in commit.c in libgit2 before 0.24.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a cat-file command with a crafted object file.

Severity: MEDIUM (5.5) Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.0
Back to top