Synopsis:          Important: git security update
Advisory ID:       SLSA-2023:3263-1
Issue Date:        2023-05-24
CVE Numbers:       CVE-2023-25652
                   CVE-2023-29007
--

Security Fix(es):

* git: by feeding specially crafted input to `git apply --reject`, a path
outside the working tree can be overwritten with partially controlled
contents (CVE-2023-25652)

* git: arbitrary configuration injection when renaming or deleting a
section from a configuration file (CVE-2023-29007)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
--

SL7
  x86_64
    git-1.8.3.1-25.el7_9.x86_64.rpm
    git-daemon-1.8.3.1-25.el7_9.x86_64.rpm
    git-debuginfo-1.8.3.1-25.el7_9.x86_64.rpm
    git-gnome-keyring-1.8.3.1-25.el7_9.x86_64.rpm
    git-svn-1.8.3.1-25.el7_9.x86_64.rpm
  noarch
    emacs-git-1.8.3.1-25.el7_9.noarch.rpm
    emacs-git-el-1.8.3.1-25.el7_9.noarch.rpm
    git-all-1.8.3.1-25.el7_9.noarch.rpm
    git-bzr-1.8.3.1-25.el7_9.noarch.rpm
    git-cvs-1.8.3.1-25.el7_9.noarch.rpm
    git-email-1.8.3.1-25.el7_9.noarch.rpm
    git-gui-1.8.3.1-25.el7_9.noarch.rpm
    git-hg-1.8.3.1-25.el7_9.noarch.rpm
    git-instaweb-1.8.3.1-25.el7_9.noarch.rpm
    git-p4-1.8.3.1-25.el7_9.noarch.rpm
    gitk-1.8.3.1-25.el7_9.noarch.rpm
    gitweb-1.8.3.1-25.el7_9.noarch.rpm
    perl-Git-1.8.3.1-25.el7_9.noarch.rpm
    perl-Git-SVN-1.8.3.1-25.el7_9.noarch.rpm

- Scientific Linux Development Team