-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3521-1 security@xxxxxxxxxx https://www.debian.org/security/ Salvatore Bonaccorso March 19, 2016 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : git CVE ID : CVE-2016-2315 CVE-2016-2324 Debian Bug : 818318 Lael Cellier discovered two buffer overflow vulnerabilities in git, a fast, scalable, distributed revision control system, which could be exploited for remote execution of arbitrary code. For the oldstable distribution (wheezy), these problems have been fixed in version 1:1.7.10.4-1+wheezy3. For the stable distribution (jessie), these problems have been fixed in version 1:2.1.4-2.1+deb8u2. For the unstable distribution (sid), these problems have been fixed in version 1:2.8.0~rc3-1. CVE-2016-2315 was already fixed in version 1:2.7.0-1. We recommend that you upgrade your git packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCgAGBQJW7WtSAAoJEAVMuPMTQ89En/4P/37MdL3kQWHuFymW/r9iV//0 yGwJVfmqclCGBcAnBDT+xfxQWNon1SW/v+XoQozKw2JJgnR6i3heHgmbd2OiG4EB giiy6fpJdqQEvA+Mf0IqhcYEGJtkAa+WS4mPlWjWA8+IJ3gp05pWqnKAwjI2/RPn BLp5XhvYnMT0O22i7ojXgHA6P2JL+MrFcPkeEtM5053x0RPbbjtdj9ptquiIul7D Z9DghL7xAbydj5irO5oGGHgtuzXzwxj51Pod9TFY1C68AWAuebVBFifKxN3U0HKu 6sI7afX/EIgdbTNvyID5aJeJ3SJ00jmHkankWbgCtfl1Fy0xR+hcQa3CqnbndNlp /PZutcaBtyC1+QrO4WcgctcflItPUCxrzPr57shzsKdsL5N+PI25nLBu9VM/7eqL 4dKKF9oNpaT0XKRAI7H91gF57knmqnmyWYEfzlooCQqSTvHenxQH8vYhEiaF7tfI UwJLpkQqy8LqIFzBG9SU7XzIff8zSshrL7awc0woTDjvwSS0f5Y/M86XVVpbh8/8 VKxBKmPdCL0dXEoWC6mfHLtDysK9AMKj+aXL1sYukaqYl57WNLirzw7xLG2oHDVq 1FXAlDQ+UtveqaS8CaozEPY6dbyMV7316mnJ5i9hnwZLQI1R1goG8/Ecm/oz5Tx1 zrx08lCKzQfxtXUb4CBd =Fp9P -----END PGP SIGNATURE-----
