git/list[1] front-page[2] threads[3] people[4] search[5] about
 

GIT 2.3.1 - Code Execution Vulnerability

From
Cchristian.del.vecchio@zurich.com <christian.del.vecchio@zurich.com>
Date
Jan 25, 2018, 17:02 UTC
Message-ID
<201801251702.w0PH2YFI000707@b0d0p4a1.rz.ch.zurich.com>
dear Team

I am Christian Del Vecchio,and i work in the infrastructure of Middleware on Zurich. we have installed in our system Sun your product in order to connect to our bitbucket repository.

we have followed the instruction provided on your Web Page:

https://git-scm.com/download/linux pkgutil -i git

the version installed is the 2.3.1, and actually it works.
but last week our security team informed that this software didn't pass the check control due: Git Server and Client Remote Code Execution Vulnerability
please, is it available a newer version that fix this problem?
our system is: Sun Solaris v10 sparc

best regards __________________________________________

Christian Del Vecchio Middleware SME

Zurich Insurance Group Ltd. bac de Roda 58, Building C, 4th floor 08019 Barcelona, Spain

64402 (internal) +34 93 4465402 (direct) christian.del.vecchio@zurich.com http://www.zurich.com

Next: Santiago Torres
Message 1 of 3 in “GIT 2.3.1 - Code Execution Vulnerability”
  1. christian.del.vecchio@zurich.comJan 25, 2018
  2. Santiago TorresJan 25, 2018
  3. Dyer, EdwinJan 25, 2018

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.