Git gitweb Unspecified Remote Command Execution Vulnerability

Bugtraq ID:	33215
Class:	Input Validation Error
CVE:	CVE-2008-5517
Remote:	Yes
Local:	No
Published:	Jan 12 2009 12:00AM
Updated:	Mar 10 2009 07:26PM
Credit:	This issue was disclosed by Novell.
Vulnerable:	Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux -current S.u.S.E. openSUSE 10.3 rPath rPath Linux 2 GIT GIT 1.5.6 6 GIT GIT 1.5.2 4 Gentoo Linux
Not Vulnerable:

Git gitweb Unspecified Remote Command Execution Vulnerability

Git gitweb is prone to a remote command-execution vulnerability.

An attacker may exploit this issue to execute arbitrary commands within the context of the affected application; this may aid in further attacks.

Git 1.5.2.4 and 1.5.6.6 are vulnerable; other versions may also be affected

Git gitweb Unspecified Remote Command Execution Vulnerability

Attackers can exploit this issue via a browser.

Git gitweb Unspecified Remote Command Execution Vulnerability

Solution:
Updates are available; please see the references for more information.


Ubuntu Ubuntu Linux 7.10 i386

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_i386.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 8.10 lpia

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.6.3-1.1ubunt u2.1_lpia.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

Slackware Linux 12.1

• Slackware git-1.6.1.3-i486-1_slack12.1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ git-1.6.1.3-i486-1_slack12.1.tgz

Ubuntu Ubuntu Linux 6.06 LTS amd64

• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_amd64.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb

Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_powerpc.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Slackware Linux 12.0

• Slackware git-1.6.1.3-i486-1_slack12.0.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ git-1.6.1.3-i486-1_slack12.0.tgz

Slackware Linux -current

• Slackware git-1.6.1.3-i486-1.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/d/gi t-1.6.1.3-i486-1.tgz

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.6.3-1.1ubunt u2.1_sparc.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS powerpc

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.4.3-1ubuntu2 .1_powerpc.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.6.3-1.1ubunt u2.1_powerpc.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.6. 3-1.1ubuntu2.1_i386.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS sparc

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.4.3-1ubuntu2 .1_sparc.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Slackware Linux 12.2

• Slackware git-1.6.1.3-i486-1_slack12.2.tgz
  ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ git-1.6.1.3-i486-1_slack12.2.tgz

Ubuntu Ubuntu Linux 7.10 amd64

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_amd64.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_sparc.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS i386

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.4. 3-1ubuntu2.1_i386.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS amd64

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.4. 3-1ubuntu2.1_amd64.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS powerpc

• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_powerpc.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb

Ubuntu Ubuntu Linux 7.10 sparc

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_sparc.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.2. 5-2ubuntu0.1_sparc.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Ubuntu Ubuntu Linux 8.10 amd64

• Ubuntu git-arch_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.6.3-1.1ubuntu2.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.5.6. 3-1.1ubuntu2.1_amd64.deb


• Ubuntu git-cvs_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.6.3 -1.1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .6.3-1.1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.6.3-1. 1ubuntu2.1_all.deb


• Ubuntu gitweb_1.5.6.3-1.1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 6.3-1.1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu git-arch_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-core_1.5.4.3-1ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.4.3-1ubuntu2 .1_lpia.deb


• Ubuntu git-cvs_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-daemon-run_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-doc_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.4.3 -1ubuntu2.1_all.deb


• Ubuntu git-email_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.4.3-1ubuntu2.1_all.deb


• Ubuntu git-gui_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu git-svn_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .4.3-1ubuntu2.1_all.deb


• Ubuntu gitk_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.4.3-1u buntu2.1_all.deb


• Ubuntu gitweb_1.5.4.3-1ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 4.3-1ubuntu2.1_all.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu git-arch_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 1.3-1ubuntu1.1_all.deb


• Ubuntu git-core_1.1.3-1ubuntu1.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-core_1.1.3- 1ubuntu1.1_i386.deb


• Ubuntu git-cvs_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu git-doc_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.1.3-1 ubuntu1.1_all.deb


• Ubuntu git-email_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-email_1.1.3 -1ubuntu1.1_all.deb


• Ubuntu git-svn_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.1 .3-1ubuntu1.1_all.deb


• Ubuntu gitk_1.1.3-1ubuntu1.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.1.3-1ubu ntu1.1_all.deb

Ubuntu Ubuntu Linux 7.10 lpia

• Ubuntu git-arch_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-arch_1. 5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-core_1.5.2.5-2ubuntu0.1_lpia.deb
  http://ports.ubuntu.com/pool/main/g/git-core/git-core_1.5.2.5-2ubuntu0 .1_lpia.deb


• Ubuntu git-cvs_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-cvs_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-daemon-run_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-daemon- run_1.5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-doc_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/git-doc_1.5.2.5 -2ubuntu0.1_all.deb


• Ubuntu git-email_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-email_1 .5.2.5-2ubuntu0.1_all.deb


• Ubuntu git-gui_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-gui_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu git-p4_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-p4_1.5. 2.5-2ubuntu0.1_all.deb


• Ubuntu git-svn_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/git-svn_1.5 .2.5-2ubuntu0.1_all.deb


• Ubuntu gitk_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/g/git-core/gitk_1.5.2.5-2u buntu0.1_all.deb


• Ubuntu gitweb_1.5.2.5-2ubuntu0.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/g/git-core/gitweb_1.5. 2.5-2ubuntu0.1_all.deb

Git gitweb Unspecified Remote Command Execution Vulnerability

References:

• Git Homepage (Git)
  
• openSUSE Homepage (SUSE)
  
• rPath Homepage (rPath)