Git gitweb 'diff.external' Local Privilege Escalation Vulnerability

Bugtraq ID:	32967
Class:	Design Error
CVE:	CVE-2008-5916
Remote:	No
Local:	Yes
Published:	Dec 22 2008 12:00AM
Updated:	Mar 17 2011 07:47AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Sun Solaris 11 Express Pardus Linux 2008 0 GIT GIT 1.6 5 GIT GIT 1.5.6 5 GIT GIT 1.5.6 .4 GIT GIT 1.5.6 .3 GIT GIT 1.5.5 5 GIT GIT 1.5.4 6 GIT GIT 1.1.5 GIT GIT 1.1.4 Gentoo Linux
Not Vulnerable:	GIT GIT 1.6 6 GIT GIT 1.5.6 6 GIT GIT 1.5.5 6 GIT GIT 1.5.4 7

Git gitweb 'diff.external' Local Privilege Escalation Vulnerability

Git gitweb is prone to a local privilege-escalation vulnerability.

A local attacker may exploit this issue to gain elevated privileges.

Versions prior to Git 1.5.4.7, 1.5.5.6, 1.5.6.6, and 1.6.0.6 are vulnerable.

Git gitweb 'diff.external' Local Privilege Escalation Vulnerability

Attackers can use readily available command-line tools to exploit this issue.

Git gitweb 'diff.external' Local Privilege Escalation Vulnerability

Solution:
Updates are available; please see the references for more information.


Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_i386.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.6.3-1.1ubunt u2.1_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu git-core_1.1.3-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_amd64.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb

Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_powerpc.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.6.3-1.1ubunt u2.1_sparc.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.4.3-1ubuntu2 .1_powerpc.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.6.3-1.1ubunt u2.1_powerpc.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.6. 3-1.1ubuntu2.1_i386.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.4.3-1ubuntu2 .1_sparc.deb

Ubuntu Ubuntu Linux 7.10 amd64

• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_amd64.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_sparc.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.4. 3-1ubuntu2.1_i386.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.4. 3-1ubuntu2.1_amd64.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_powerpc.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu git-core_1.5.2.5-2ubuntu0.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_sparc.deb


• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.6. 3-1.1ubuntu2.1_amd64.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb


• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.4.3-1ubuntu2 .1_lpia.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_i386.deb


• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu git-core_1.5.2.5-2ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.2.5-2ubuntu0 .1_lpia.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb

GIT GIT 1.5.4 6

• GIT git-1.5.4.7.tar.gz
  http://kernel.org/pub/software/scm/git/git-1.5.4.7.tar.gz

GIT GIT 1.5.5 5

• GIT git-1.5.5.6.tar.gz
  http://kernel.org/pub/software/scm/git/git-1.5.5.6.tar.gz

GIT GIT 1.5.6 5

• GIT git-1.5.6.6.tar.gz
  http://kernel.org/pub/software/scm/git/git-1.5.6.6.tar.gz

GIT GIT 1.5.6 .4

• GIT git-1.5.6.6.tar.gz
  http://kernel.org/pub/software/scm/git/git-1.5.6.6.tar.gz

GIT GIT 1.5.6 .3

• GIT git-1.5.6.6.tar.gz
  http://kernel.org/pub/software/scm/git/git-1.5.6.6.tar.gz

GIT GIT 1.6 5

• GIT git-1.6.0.6.tar.gz
  http://kernel.org/pub/software/scm/git/git-1.6.0.6.tar.gz

Git gitweb 'diff.external' Local Privilege Escalation Vulnerability

References:

• [SECURITY] Fedora 8 Update: git-1.5.4.3-3.fc8 (Fedora)
  
• [SECURITY] Fedora 9 Update: git-1.5.6.6-1.fc9 (Fedora)
  
• [Security] gitweb local privilege escalation (fix) (Junio C Hamano )
  
• Git Homepage (Git)
  
• Multiple Vulnerabilities in Git Version Control System (Sun)