Git Pathname Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	30549
Class:	Boundary Condition Error
CVE:	CVE-2008-3546
Remote:	Yes
Local:	No
Published:	Aug 05 2008 12:00AM
Updated:	Apr 13 2015 09:21PM
Credit:	Dmitry Potapov
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux -current rPath rPath Linux 2 Pardus Linux 2008 0 Pardus Linux 2007 0 GIT GIT 1.5.6 .3 Gentoo Linux Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	GIT GIT 1.5.6 .4

Git Pathname Multiple Buffer Overflow Vulnerabilities

Git is prone to multiple buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting these issues may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will cause denial-of-service conditions.

Git 1.5.6.3 is vulnerable; prior versions may also be affected.

Git Pathname Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Git Pathname Multiple Buffer Overflow Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_powerpc.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Slackware Linux 12.0

• Slackware git-1.6.1.3-i486-1_slack12.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ git-1.6.1.3-i486-1_slack12.0.tgz

Slackware Linux -current

• Slackware git-1.6.1.3-i486-1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/d/gi t-1.6.1.3-i486-1.tgz

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.4.3-1ubuntu2 .1_powerpc.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.6.3-1.1ubunt u2.1_powerpc.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.6. 3-1.1ubuntu2.1_i386.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.4.3-1ubuntu2 .1_sparc.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Slackware Linux 12.2

• Slackware git-1.6.1.3-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ git-1.6.1.3-i486-1_slack12.2.tgz

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_sparc.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.4. 3-1ubuntu2.1_amd64.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_powerpc.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_sparc.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.4.3-1ubuntu2 .1_lpia.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_i386.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.2.5-2ubuntu0 .1_lpia.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.6.3-1.1ubunt u2.1_lpia.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_i386.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_amd64.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb

Slackware Linux 12.1

• Slackware git-1.6.1.3-i486-1_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ git-1.6.1.3-i486-1_slack12.1.tgz

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.6.3-1.1ubunt u2.1_sparc.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 7.10 amd64

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_amd64.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.4. 3-1ubuntu2.1_i386.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.6. 3-1.1ubuntu2.1_amd64.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

GIT GIT 1.5.6 .3

• GIT git-1.5.6.4.tar.gz
  http://www.kernel.org/pub/software/scm/git/git-1.5.6.4.tar.gz

Git Pathname Multiple Buffer Overflow Vulnerabilities

References:

• [PATCH] Fix buffer overflow in git diff (Git)
  
• Git Homepage (Git)
  
• GIT v1.5.6.4 Release Notes (Git)